Management > Administration > Customization: Authenticator
The Authenticator custom component allows you to provide your own password validation rules. For example, you might want to check a password against a dictionary to make sure a password is not an English word.