Worked on the keycloak/keycloak repository to deliver a security-focused password policy feature that prevents users from setting their password to their username or email, regardless of letter case. This enhancement involved implementing robust case-insensitive comparisons to enforce policy requirements and reduce credential-related risks. Addressed a related bug to ensure that password checks consistently ignore case when validating against usernames and emails, directly resolving issue #22804. The work was carried out using Java, with a focus on backend development and unit testing to ensure reliability. These changes strengthen authentication governance and improve overall security posture within the Keycloak platform.