Password Settings

Owned by Stacy Reno (Unlicensed)
Last updated: Jun 25, 2024 by Jorge Raya-Navarro
3 min read

e-PlanREVIEW® (EPR) provides baseline login security through a set of enforced password requirements for all users. Additionally, EPR provides optional password features for agencies who desire stricter password requirements as described below.

If an Agency intends to enforce any additional password security requirements, it’s best to configure these before user accounts are created to ensure that all accounts comply with the requirements. Any pre-existing accounts should be reviewed to ensure they comply with optional password requirements.

Standard Password Security Rules

To view the standard password security rules enforced by EPR:

  1. Navigate to the EPR Password page at Settings > Security > Password.

  2. The page lists a series of always-enforced rules indicating that each account password requires:

    1. At least one uppercase alpha character

    2. At least one numeric character

    3. At least one of the following special characters: ! @ # $ % ^ & *

    4. A minimum password length of 7 characters (see Password Strength)

image-20240620-110845.png
List of password security requirements

These baseline password security rules are always enforced and, password length aside, cannot be modified or reconfigured.

Password Strength

Within EPR, ‘Password Strength’ refers to the minimum character length of a login password. This value is initially defaulted to minimum length of 7 characters, though Administrators can modify this to be anywhere between 7 and 30 characters.

To view or update the minimum password character length:

  1. Navigate to the EPR Password page at Settings > Security > Password.

  2. Under the list of “Standard password security…” rules, check the set value for Password Strength.

  3. If desired, enter a new value (must be an integer between 7 and 30 characters) within the field.

  4. Click SAVE to confirm the update.

image-20240620-111003.png
Password Strength Field

When creating a new user account, the login password must meet the minimum character length configured on this page. Minimum password length cannot be disabled.

Password Expiration

If desired, Agency Administrators can also enforce periodic password expiration so that users have to updated their account passwords after a certain amount of time.

To enable, update, or disable password expiration:

  1. Navigate to the EPR Password page at Settings > Security > Password.

  2. Click on the Enforce Password Expiration toggle to either:

    1. Enable (toggle to the right, green color)

    2. Disable (toggle to the left, gray color)

  3. If enabling password expiration, enter the number of days for passwords to last before they expire:

    1. Set this value to 0 if passwords are never meant to expire.

    2. Set this value to any number greater than 0 if they are meant to expire.

      1. The value set reflects the number of days that a password remains valid before it expires and the user has to update their password.

      2. The smaller the number, the more frequently users will need to update their login credentials.

  4. Click SAVE to confirm the update.

 

Related articles