# X_PASSWORD_WEAK

## Means

strength check rejected the password

## Typical cause

too short, or a known-common password

## Fix

choose a longer, uncommon password — or relax `defineAuth({ password: { minLength } })`

[Auth and sessions](/error-codes#auth-and-sessions)