Password Complexity Standards

Password Policy Requirements

The following password requirements are enforced for all user accounts:

Password History

• The system will remember the last three (3) passwords, preventing users from reusing them.

Password Age

• Maximum Password Age: 90 days

• Minimum Password Age: 2 days

Password Length

• Passwords must be at least eight (8) characters in length.

Password Complexity Requirements
Passwords must meet the following complexity requirements:

1. Passwords must not contain the user's account name or more than two consecutive characters from the user's full name.

2. Passwords must contain characters from at least three (3) of the following four categories:

   • Uppercase letters: A–Z

   • Lowercase letters: a–z

   • Numbers: 0–9

   • Special characters: such as !, $, #, %, etc.

Enforcement

• Password complexity requirements are enforced whenever a password is created or changed.