Password and Security Features

Owned by Former user (Deleted)
Last updated: Jul 05, 2022 by Laurie McIntosh

Good password security practices are key in any organization. You can manage your password expiry, strength, and other security concerns, in System Settings. These security settings apply to administrators only.

Manage Security Settings

To edit security settings, hover over System Config and click System Settings.

In System Settings, click Security in the list of settings.

The Manage System Settings window will open and all the security settings will be available.

Salted Password Hashing, Password Update, Toggle Password Expiry and Enable Password History

Using salted password hashing adds an extra layer of security to stored passwords. Hashing is a one-way, irreversible process that takes the password a user enters and converts it into a short hash value. Salting randomizes the string of digits for the hash value so that two users have the same password, they will have different hash strings. It is not possible to reverse engineer a hash, so you cannot “look up” what the original password was.  Instead, a user who forgets their password, for example, would have to reset it completely. This limits an administrator’s ability to view the passwords of employees and closes up a security vulnerability.

Require Password Update - When activated, this setting will force users to change their passwords on next login.

Toggle Password Expiry - By default passwords do not expire.  For added security, it is good practice to have passwords expire every 90 days. You can enter the number of days before a password expiry to conform with your organization's security policy and toggle it on.

Enable Password History - When toggled on, OPS-COM will remember the passwords you have used in the past, and will not allow repeat use of the password for the time set in days. 


Password Strength and Admin Lockout 

Using Password Strength Settings the admin can set rules for how complex a password needs to be to meet security rules.

These settings include:

Minimum Password Length - minimum number of characters in the password
Enable Password Strength Requirements - Toggles on or off the following requirements:

  • Minimum number of Numerical Characters required in the password

  • Minimum number of Lower Case Characters required in the password

  • Minimum number of Upper Case Characters required in the password

  • Minimum number of Non-Alpha numeric Characters required in the password (Special characters such as !,&,#, etc.)

Admins can opt to set up additional security settings that can lock the user out of the system if an incorrect password is entered repeatedly within a specific time frame. In the setting example, 120 minutes would lock the Admin out of their account for 2 hours, if three failed attempts to log in occur during a five minute period.

Related Pages