Password Policy

The level of our password policy aims to ensure that all passwords are strong enough to resist all types of known attacks. This policy applies to all the accounts of the application, both customers and operational, in addition to the requirement for multi-factor authentication.

Rules

Password must be composed of all four elements from the following sets:

  • Lowercase (a-z)

  • Upper case (A-Z)

  • Numbers (0-9)

  • Special characters (!@#$%^&*).

  • The password must have a minimum of 15 characters in length.

  • No password reuse within the previous 8 passwords.

  • Passwords are changed at least every 30 days.

  • After a maximum of 5 failed attempts on the same IP, the account is locked.

  • Users can reset their password only once every 24 hours.

  • Do not allow passwords that are part of the password dictionary (common passwords).