This was an interesting question! to enforce requirements, we recommend using an external authentication provider, there isn’t a password policy enforced by grafana per this issue:
Out of curiosity, I tried changing a password to a blank string (a single space character) and saw an error that it was too short. It appears that at least 4 characters are required - it accepted four spacebar characters. But the password cannot be left empty.
