Password policies

Password policies define the rules that every platform access password must follow: length, complexity, validity, and lockout for failed attempts. They help maintain secure access and are available when the company uses Dattos' default authentication.

Before you begin

Access is typically restricted to administrators. The rules apply to all users who log in through the platform's default authentication.

Accessing password policies

1. Open Configuration (gear icon) → Information Security → Password Policies.

2. Adjust the rules (described below) and save.

Available rules

Each rule has a recommended value as a starting point:

• Minimum number of characters: minimum password length. Recommended: 8.

• Minimum number of different characters: how many characters must be distinct. For example, with a minimum of 1, the password AAA is invalid and AAB is valid. Recommended: 1.

• Number of days for the password to expire: password validity, counted from the last change. Recommended: 90.

• Number of previous passwords that cannot be reused: prevents the reuse of the most recent passwords. Recommended: 3.

• Maximum number of attempts before lockout: failed login attempts until the system blocks access. Recommended: 3.

There are also four composition requirements, all recommended as Yes:

• Require uppercase characters (e.g., ABCDE).

• Require lowercase characters (e.g., abcde).

• Require special characters (e.g., !@#$%).

• Require numeric characters (e.g., 12345).