Password Policy Options
The following user password policy options are supported. These can be configured via the relevant user management commands. Duration-based values are specified in minutes (converted internally from seconds).
Note: If not provided, the following enforced minimums apply:
minimum_length
: 8 charactersmax_attempts
: 3 attempts
Supported Policy Options
minimum_length
Specifies the minimum number of characters required for a valid password.
max_attempts
Defines the maximum number of failed login attempts allowed before the user is locked out.
Password Expiration
Specifies the number of days after which a password will expire and require the user to set a new one.
Lock Duration
Specifies the duration (in minutes) a user remains locked out before being automatically unlocked, based on the time the account was locked.
Password Failure Interval
Defines the time window (in minutes) for tracking failed login attempts. If the user's last failed attempt falls outside this interval, the failure count is reset. The failure count does not reset if the user is locked out and requires admin intervention to unlock the user.
Password History
Specifies the number of previously used passwords that cannot be reused by the user. Previously used passwords are not tracked unless Password History
is enabled.
User Examples
Creating New Policy
- The following image shows when a user creates a new policy
Policy Showing in the List
- The following image shows when the new policy is displayed in the list
Create User with New Policy
- The following image shows when a new user is created and is placed under the new policy