This page provides guidance on configuring password strength and timeout settings in nVIRO to enhance security and ensure compliance with organizational policies.
Password Strength Configuration
To maintain strong password security, nVIRO supports configurable settings to enforce password complexity. Below are the key options:
Minimum Password Length
Enforce a minimum length for all passwords.
Recommended: At least 12 characters.
Character Requirements
Ensure passwords include a mix of character types:
At least one uppercase letter (A–Z).
At least one lowercase letter (a–z).
At least one number (0–9).
At least one special character (e.g., !@#$%^&*).
Prohibited Passwords
Prevent the use of common passwords, dictionary words, or previously breached passwords.
Enable integration with external password blacklist services if available.
Password Timeout Configuration
Timeout settings help mitigate unauthorized access by enforcing session and password expiration policies. nVIRO supports the following options:
Session Timeout
Automatically log users out after a period of inactivity.
Recommended: Set a timeout between 15–30 minutes of inactivity.
Password Expiration
Require users to change passwords periodically.
Recommended: Set expiration intervals of 60–90 days.
Account Lockout Policy
Temporarily lock user accounts after a specified number of failed login attempts.
Recommended: Lock accounts after 5 unsuccessful attempts.
Suggested lockout duration: 15 minutes.
Best Practices for Password Management
Encourage the use of password managers to generate and store secure passwords.
Educate users on recognizing phishing attempts and securing their credentials.
Enable multi-factor authentication (MFA) for an additional layer of security.
Related Articles
For assistance with configuring these settings, please contact the nVIRO Support Team or refer to the System Administration Guide.