I noticed there wasn't a full list for what options can be set in the web.config file. So here is the list direct from the source code:
1: <membership defaultProvider="XmlMembershipProvider">
2: <providers>
3: <clear/>
4: <add applicationName="MyApp"
5: name="XmlMembershipProvider"
6: type="Artem.Web.Security.XmlMembershipProvider"
7: enablePasswordReset="True"
8: maxInvalidPasswordAttempts="5"
9: minRequiredNonAlphanumericCharacters="0"
10: minRequiredPasswordLength="5"
11: passwordAttemptWindow="10"
12: passwordStrengthRegularExpression="[\w| !§$%&/()=\-?\*]*"
13: requiresQuestionAndAnswer="False"
14: requiresUniqueEmail="True"
15: passwordFormat="Encrypted"/>
16: </providers>
17: </membership>