diff --git a/.changeset/eighty-zoos-play.md b/.changeset/eighty-zoos-play.md
new file mode 100644
index 00000000000..1aa7282352d
--- /dev/null
+++ b/.changeset/eighty-zoos-play.md
@@ -0,0 +1,5 @@
+---
+'@clerk/clerk-js': patch
+---
+
+Fix incomplete string escaping or encoding within password complexity.
diff --git a/packages/clerk-js/src/utils/passwords/complexity.ts b/packages/clerk-js/src/utils/passwords/complexity.ts
index 7786ac17234..7f736836599 100644
--- a/packages/clerk-js/src/utils/passwords/complexity.ts
+++ b/packages/clerk-js/src/utils/passwords/complexity.ts
@@ -13,8 +13,8 @@ const createTestComplexityCases = (config: Pick<UsePasswordComplexityConfig, 'al
   let specialCharsRegex: RegExp;
   if (config.allowed_special_characters) {
     // Avoid a nested group by escaping the `[]` characters
-    let escaped = config.allowed_special_characters.replace('[', '\\[');
-    escaped = escaped.replace(']', '\\]');
+    let escaped = config.allowed_special_characters.replace(/\[/g, '\\[');
+    escaped = escaped.replace(/\]/g, '\\]');
     specialCharsRegex = new RegExp(`[${escaped}]`);
   } else {
     specialCharsRegex = /[!"#$%&'()*+,-./:;<=>?@[\]^_`{|}~]/;