Password Rules

Use the Password Rules page to configure settings that apply to all user passwords.

To display this page, click System > Passwords > Password Rules in the navigation menu.

Click to expand in new window

Password Rules Configuration Fields

Field Description
Minimum Length Passwords must have at least this many characters (range is 8 to 64).
Aging (days) The number of days that a user password is valid from the time the password is set. Once a password expires, the user is required to enter a new password at the next login.
History The number of previous passwords that are retained to prevent password reuse. This helps to ensure that a user does not attempt to reuse the same password too often.
Lockout Attempts After a user fails to log in this number of times, the user is locked out until the password is reset by the administrator.
Strength Check Enable or disable the password strength check feature. Enabling this feature forces the user to configure passwords that comply with the strong password configuration specified in the following fields.
Minimum Number of Uppercase Letters Specify the minimum number of uppercase letters a password must include.
Minimum Number of Lowercase Letters Specify the minimum number of lowercase letters a password must include.
Minimum Number of Numeric Characters Specify the minimum number of numbers a password must include.
Minimum Number of Special Characters Specify the minimum number of special characters (non-alphanumeric, such as # or &) a password must include.
Maximum Number of Repeated Characters Specify the maximum number of repeated characters a password is allowed to include. An example of four repeated characters is aaaa.
Maximum Number of Consecutive Characters Specify the maximum number of consecutive characters a password is allowed to include. An example of four consecutive characters is abcd.
Minimum Character Classes Specify the minimum number of character classes a password must contain. There are four character classes:
  • Uppercase
  • Lowercase
  • Numbers
  • Special Characters
Exclude Keyword The password to be configured should not contain the keyword mentioned in this field. The valid range for the keyword is 2 to 64 characters.
Exclude Keyword Name The list of keywords that a valid password must not contain. Excluded keyword checking is case-insensitive. Additionally, a password cannot contain the backwards version of an excluded keyword. For example, if pass is an excluded keyword, passwords such as 23passA2c, ssapword, and PAsSwoRD are prohibited. Use the plus and minus buttons to perform the following tasks:
  • To add a keyword to the list, click the + (plus) button, type the word to exclude in the Exclude Keyword Name field, and click Submit.
  • To remove a keyword from the list, click the – (minus) button associated with the keyword to remove and confirm the action.
  • To remove all keywords from the list, click the – (minus) button in the header row and confirm the action.

If you change any of the parameters, click Submit to apply the changes to the system. If you want the switch to retain the new values across a power cycle, you must save the configuration.