diff --git a/docker/containers/tactical-meshcentral/entrypoint.sh b/docker/containers/tactical-meshcentral/entrypoint.sh
index 3e612fc19c..d5e3f2fa1d 100644
--- a/docker/containers/tactical-meshcentral/entrypoint.sh
+++ b/docker/containers/tactical-meshcentral/entrypoint.sh
@@ -43,6 +43,21 @@ mesh_config="$(cat << EOF
       "coolofftime": 30
     }
   },
+  "domaindefaults":{
+    "passwordRequirements": {
+      "min": 8,
+      "max": 128,
+      "upper": 1,
+      "lower": 1,
+      "numeric": 1,
+      "nonalpha": 1,
+      "reset": 90,
+      "force2factor": false,
+      "oldPasswordBan": 5,
+      "banCommonPasswords": true,
+      "twoFactorTimeout": 300
+    }
+  },
   "domains": {
     "": {
       "Title": "Tactical RMM",
diff --git a/install.sh b/install.sh
index 6acce06fe4..88b8facf3a 100644
--- a/install.sh
+++ b/install.sh
@@ -288,6 +288,21 @@ meshcfg="$(cat << EOF
     "MaxInvalidLogin": { "time": 5, "count": 5, "coolofftime": 30 }
   },
   "domains": {
+    "domaindefaults":{
+      "passwordRequirements": {
+        "min": 8,
+        "max": 128,
+        "upper": 1,
+        "lower": 1,
+        "numeric": 1,
+        "nonalpha": 1,
+        "reset": 90,
+        "force2factor": false,
+        "oldPasswordBan": 5,
+        "banCommonPasswords": true,
+        "twoFactorTimeout": 300
+      }
+    },
     "": {
       "Title": "Tactical RMM",
       "Title2": "Tactical RMM",