Out of the box password validation script will not check for special characters. Also, in special special characters, we need to handle square brackets([] )differently since they have special meaning in regex.

Follow the below process to include special characters and square brackets([]) in password validation.

Release or Environment

All versions.


  • Password validation is done by the below script OOB:
    • https://<Instance_name>
  • Out of the box code the below regex to verify the password strength:
    • ^(?=.*\d)(?=.*[a-z])(?=.*[A-Z]).{8,}
  • Note that all the special character can be placed in between [] except -(Hyphen) and the brackets themselves. Please provide escape sequence character \ before [, ] and -.
  • Change it to below regex to include special character along with square brackets[]:
    • ¬†^(?=.*\d)(?=.*[a-z])(?=.*[A-Z])(?=.*[\\\[\\\](){}?\\\\|,.<>;:!~*_@#$%^&+=\-]).{8,}$

Additional Information

The below regex tester can be used to test your regular expression.

Use the below online javascript tester to check if your code works:

NOTE: Above two links are external links and subject to change. ServiceNow will not take any responsibility of the content of the information in the above websites.

Article Information

Last Updated:2019-12-04 06:02:01