Mendix lets you define a password policy in Studio Pro, but offers no Runtime Java API to read it, forcing developers into ugly workarounds like committing dummy users in rollback transactions or manually mirroring policy values as constants that silently drift out of sync. A simple Core.getPasswordPolicy() returning the configured minimum length and character requirements would let custom login flows, user-facing hints, and validation logic stay consistent with the model, with a single source of truth.