A password policy is a set of rules designed to increase mobile device privacy and security by encouraging users to create and use strong passwords. Because of the sensitivity of health information, password policies and complexity requirements should be strict. A password policy should also include the organization’s password protection requirements. All providers, professionals, and staff should understand and agree to follow password policies.