Skip to main content

Password Policy

** Draft template.** This is generic starting content, not a reviewed or binding company policy. Have Legal review and approve before publishing externally.

Minimum requirements​

  • Minimum password length and complexity as enforced by the platform.

  • Passwords must not be shared between users.

  • Multi-factor authentication (MFA) is recommended, and required for administrative accounts where supported.

  • Passwords should be changed immediately if compromise is suspected.

Account lockout​

Accounts are typically locked after a defined number of failed login attempts, to prevent brute-force attacks.