Password policy

You can configure the minimum character limit and allowable characters while creating a password.

To navigate to password policy, follow these steps:

1. Login to Webex Engage and click the Try new version button on the top-right corner of the application.
   The Webex Engage React application will launch.
2. Navigate to Settings > Security > Password policy.

Minimum character length

You can configure the password length and define the character groups that the password must contain. You can select the maximum password length as 6, 9, or 12 characters from the Maximum Character Length drop-down list.

• Upper Case: Select the upper case checkbox to configure password using upper case letters (A to Z).
• Lower Case: Select the lowercase checkbox to configure the password using lowercase letters (a to z).
• Numerics: Select the numerics checkbox to configure password using numbers (0 to 9).
• Special Characters: Select the special characters checkbox to configure password using %,$,@ special characters.
• Sequential Characters: Select the sequential characters checkbox to prevent users from using sequential numbers and characters in the password.

Incorrect password settings

• Enable Lock: Turn ON this toggle to lock a user’s profile beyond a certain number of wrong password attempts.
• Retry Count: Select a retry count of 3, 5, or 10 from the drop-down list. By default, this value is preset to 10 in the retry count drop-down. Once a retry count is configured, users can reset their password only for the configured number of times within 24 hours, counting from their first request timestamp. The application throws an error when a user tries to reset more than the configured attempts.
• Lock Period: Select the duration from the lock period drop-down list to lock a user's account for the configured duration when they attempt a wrong password.

Password update rules

You can configure the following as part of password update settings:

• The number of last passwords that the user’s current password should not match. Select a value from the drop-down list.
• The number of days in which a user’s password will expire. Select a value from the drop-down list. By default, the password expiry value is set to Never. If you select Never, then the password will never expire.
• The number of days before the user must be alerted about the password expiry. Select a duration from the drop-down list.