In Release 7.0, the password policies were read from the Membership Provider configured for the site (Backend -> SmarterCommerce -> Settings -> Website -> Membership Provider).

Starting in Release 7.1, the password policies are read from the Default Membership Provider configurated on the site (Backend -> Administration -> Settings -> Advanced -> Security -> Membership Providers -> Default-> Parameters)

• Password length.
• Password minimum required of non-alphanumeric characters.
• Password strength regular expression.

Note: If for some reason you want to have specific rules per site, please check the SmarterCommerce CMS Multisite Membership Provider.docx from release 6.0.2.