Password Policy

Rules can be configured to define password length, expiry, and change requirements. This page explains how to set up these options.

Password Policy Topics

Settings

Navigate to Staff & Security → Configuration → Password Policy

Settings

The following table outlines each setting and its corresponding functionality.

Setting	Description	Additional Information
Minimum Password Length	The minimum length of passwords	6 - 20 characters can be configured
Maximum Password Length	The maximum length of passwords	6 - 20 characters can be configured
Password Expiry Days	Number of days before the password expires	If the password expiry is set to 0 they will not expire
Password Notification Days	The number of days the user will be prompted that their password will expire	Password expiry days has to be greater than 0 to enable this setting with a minimum of 1 day and a maximum of 14 days It is not possible to set the Password expiry notification to be greater than or equal to the Password Expiry period It is not possible to set the Password expiry period to be less than or equal to the Password Expiry notification To prevent having to change your password on the same day as when it was last changed, it is not possible to set Password expiry to 1 day
Special Characters Required	When enabled special characters will be required in passwords	The following characters can be used: !"#$%&'()*+,-./:;<=>?@[\]^_`{\|}~ If this setting is not enabled special characters can still be used
Password Reuse	When enabled the password reset setting in conjunction with the number of password changes determines how many passwords must be used before the user can then reuse the password again
Number of Password Changes	When password reuse is enabled this will default to 24 meaning the previous 24 passwords associated to that user cannot be used again
Forgotten Password Hint	Hint text can be displayed prompting a user what they would need to do in the event that they have forgotten their password