This article describes how to enforce user password settings.  Select Security/Passwords to open the Password page. 

By default, enforcing password security for user is disabled.

Prerequisites:

None

Follow these steps to manage user passwords

Toggle on 'Enforce Password Expiration' and set the number of days after which user password should expire. 

Image Removede-PlanREVIEW (EPR) provides baseline login security through a set of enforced password requirements for all users. Additionally, EPR provides optional password features for agencies who desire stricter password requirements as described below.

...

Standard Password Security Rules

To view the standard password security rules enforced by EPR:

1. Navigate to the EPR Password page at Settings > Security > Password.

2. The page lists a series of always-enforced rules indicating that each account password requires:

   1. At least one uppercase alpha character

   2. At least one numeric character

   3. At least one of the following special characters: ! @ # $ % ^ & *

   4. A minimum password length of 7 characters (see Password Strength)

...

...

Password Strength

Within EPR, ‘Password Strength’ refers to the minimum character length of a login password. This value is initially defaulted to minimum length of 7 characters, though Administrators can modify this to be anywhere between 7 and 30 characters.

To view or update the minimum password character length:

1. Navigate to the EPR Password page at Settings > Security > Password.

2. Under the list of “Standard password security…” rules, check the set value for Password Strength.

3. If desired, enter a new value (must be an integer between 7 and 30 characters) within the field.

4. Click SAVE to confirm the update.

...

...

Password Expiration

If desired, Agency Administrators can also enforce periodic password expiration so that users have to updated their account passwords after a certain amount of time.

To enable, update, or disable password expiration:

1. Navigate to the EPR Password page at Settings > Security > Password.

2. Click on the Enforce Password Expiration toggle to either:

   1. Enable (toggle to the right, green color)

   2. Disable (toggle to the left, gray color)

3. If enabling password expiration, enter the number of days for passwords to last before they expire:

   1. Set this value to 0 if passwords are never meant to expire.

   2. Set this value to any number greater than 0 if they are meant to expire.

      1. The value set reflects the number of days that a password remains valid before it expires and the user has to update their password.

      2. The smaller the number, the more frequently users will need to update their login credentials.

4. Click SAVE to confirm the update.

...

Related articles