Who this guide is for
System administrators responsible for managing system security policies. Requires 'System Admin' role.
Overview
This guide explains how to set password and login security rules that apply to all users.
How Password Settings Work
Password settings let you control password complexity, login behaviour, and account lockout limits. These settings are applied globally to every user in the system.
How to Configure Password Settings
- Navigate to Global > Global Settings > Password Settings.
- Set your password rules:
- Minimum password length (recommended: 8+ characters)
- Password must be mixed case (tick if required)
- Password must contain special characters (tick if required)
- Maximum invalid password attempts (recommended: 3–5)
- Set your login rules:
- Allow remember me
- Login timeout (idle period before automatic logout)
- Allow users to change password
- Force users to change password (set expiry period in days)
- Click Save to apply changes.
Additional Information
- Mixed case: requires both uppercase and lowercase letters.
- Special characters: symbols such as !, @, #, $.
- Login timeout: automatic logout after a set period of inactivity.
- Requires 'System Admin' role.
- Warning: Changes apply immediately to all users – some users may be prompted to reset their password once new requirements are enabled.
- Suggested starting point: 8-character minimum with mixed case, 90-day expiry, 30-minute timeout for shared workstations.
- Let users know about changes before enforcing new requirements, to avoid a spike in support tickets.
- Tip: Use the search function within the platform to quickly find features or settings.