diff --git a/setup.sh b/setup.sh
index e12f0ff..a6509b9 100755
--- a/setup.sh
+++ b/setup.sh
@@ -223,12 +223,12 @@ SASLAUTHD_LDAP_FILTER=(&(kopanoAccount=1)(uid=%s))
 
 # LDAP user password self-service reset settings
 SELF_SERVICE_SECRETEKEY=$(random_string)
-SELF_SERVICE_PASSWORD_MIN_LENGTH=0
+SELF_SERVICE_PASSWORD_MIN_LENGTH=5
 SELF_SERVICE_PASSWORD_MAX_LENGTH=0
 SELF_SERVICE_PASSWORD_MIN_LOWERCASE=0
 SELF_SERVICE_PASSWORD_MIN_UPPERCASE=0
-SELF_SERVICE_PASSWORD_MIN_DIGIT=0
-SELF_SERVICE_PASSWORD_MIN_SPECIAL=0
+SELF_SERVICE_PASSWORD_MIN_DIGIT=1
+SELF_SERVICE_PASSWORD_MIN_SPECIAL=1
 
 # switch the value of these two variables to use the activedirectory configuration
 KCUNCOMMENT_LDAP_1=!include /usr/share/kopano/ldap.openldap.cfg