Server Policies – Password Policy

In this tab you can set a specific password policy which will be mandatory for all clients.

For instance, you can ensure that passwords are tested for their resistance to dictionary attacks. Additionally, you can define policies regarding minimum length and complexity of new or edited passwords. Please note that these policies only apply to passwords generated by Password Depot.

  • Check password quality against dictionary attacks: If you activate this option, the software will check the entered password for character strings that may be part of a dictionary and will warn you if it finds any.
  • Preferred rules for new/edited passwords: If you select this option, all new or modified passwords will be checked for compliance with the parameters defined below. When a password does not meet the defined policy, you will be prompted to modify the password.
    • Minimum length: Define how many characters a password must contain at minimum.
    • Password must include: Define which character types a password must contain and how they must be distributed. You can choose from 4 types: lowercase, uppercase, numbers and special. Furthermore, you can define that certain characters should be excluded.

NOTE: This password policy is only applied to generated random passwords. For standard password entries, users are encouraged but not forced to follow the policy due to potential conflicts with third-party requirements.

EXAMPLE: If you enable the option Check password quality against dictionary attacks, a warning will be displayed in the client each time a user enters a password or a string of characters that can also be found in dictionaries.

NOTE: By clicking Restore default settings, you can reset the settings in the Password Policy tab back to their defaults and thus discard any changes.