What it means
The password does not satisfy the published password rules.
How to handle it
Choose a password that satisfies the published length and policy requirements, then submit it again.
Wire contract
| Code | password_policy |
|---|---|
| Class | invalid_request |
| HTTP status | 400 |
| Meta keys | None |
| Raised | Yes |
The response uses the standard {"error": {…}} envelope. Branch on error.code, not the human-readable message. Preserve request_id when reporting a failure.