This page will explain how to set a password policy for the users of your Kiuwan Account. explains how to manage all kinds of policies related to the account, especially those related to passwords, audit results, privacy, and user accounts.
Contents:
Table of Contents
Passwords Policy
Account Policies
Go to Account Management > Password policies to Account Policies to set a password policy for your account.
There is a default policy (8 characters, 2 numbers), but this policy can also be customized. is customizable.
Password strength
You can configure the strength (complexity) of the passwords by specifying the following rules:
- a The minimum password length for passwords.
- The number of uppercase and lowercase lettershow many uppercases, lowercases, digits, and special characters that a password should contain the password.
Password History
Enforcing the Password History policy
will setsets how often an old password can be reused. You can define the number of previous passwords remembered
. This policy discourages, discouraging users from reusing
aprevious
password, thuspasswords and preventing them from alternating between several common passwords.
Password expiration (days)
Kiuwan allows applying Apply this policy to determine how long users can keep a password before they are required to change it, thus forcing users to periodically change it. Once the password expiration date is reached, the user will be redirected user redirects to a “change your password” page.
Login attempts
Setting the maximum number of allowed login attempts provides protection protects against “brute-force” or dictionary-based attempts to guess passwords. Kiuwan allows specifying You can specify a maximum number of consecutive login attempts allowed , after which the user account is automatically locked.
Only the Kiuwan owner (or a Kiuwan user with Users Management privilege) can enable again the locked username.
the locked account.
Do not enforce Password Reset at first login
By default, whenever Kiuwan generates a new password, the user has to change the password for the first time. When the option “Do not enforce Password Reset at first login” is set up, this behavior is disabled.
You can create a new password in the following situations:
- Creation of a new user.
- Resetting a password (by the administrator).
- Following the “Forgot my password” process on the main login page.