How to set up a password policy

Setting up a password policy is crucial for securing user accounts and protecting sensitive data.  Below is a simple guide to setting up a password policy:

1. Access the Settings: Login and access 'Registrations' section. Click on 'Password Policy' tab to access the screen.

   

2. Enable Password Requirements: The policy typically includes a series of toggles that allow you to enforce certain conditions for passwords. You can activate or deactivate these based on your security needs.

   • Roman Capitals: Enforce the use of at least one uppercase letter (A-Z). This ensures the password is complex and harder to guess.

   • Roman Lowercase Letters: Require at least one lowercase letter (a-z). This adds to the diversity of characters in the password.

   • Arabic Numerals: Ensure that the password contains at least one numeric character (0-9), making it more difficult to crack.

   • Special Characters: Mandate the inclusion of special characters (e.g., !@#$%^&*), which further strengthens the password's complexity.

   • New Password never match last five passwords: Your new password cannot be the same as any of your last five passwords. Please choose a unique one.
   • Password can not contain the username: For security reasons, your password cannot contain your username. Please select a different password.
   • Min Length characters: Your password must be at least X characters long. Please ensure it meets the minimum length requirement.
   • Lock out after X attempts: After X failed login attempts, your account will be locked for security purposes. Please ensure you enter the correct password.
3. Enforce Regular Updates: Consider adding a rule for password expiration, prompting attendees and admins to update their passwords periodically for added security. 

4. Apply Changes: Once you have selected the password elements that suit your organization's security requirements, save the changes by clicking 'Update Settings' to implement the policy. This will require users to comply with the new password rules when they create or update their passwords.

   

By customizing these settings, you can ensure that user passwords are strong, secure, and comply with your organization’s security standards.