Skip to main content
All CollectionsConfiguration
Set Up Password Policies for Your Organization
Set Up Password Policies for Your Organization

Ensure account security by setting custom password policies for your organization, including length, complexity, and expiration settings.

Logan Bowlby avatar
Written by Logan Bowlby
Updated this week

Overview

Password policies help maintain the security of your organization's data by enforcing minimum requirements for user passwords. This guide explains how to set up and manage password policies within Mobaro.


Configure Password Policy Settings

Access Security Settings

Navigate to Configuration in the Mobaro Backend.

Click on the Security tab.

Adjust Password Requirements

  1. Minimum Length – Set the minimum number of characters required.

  2. Uppercase Letters – Specify the minimum number of uppercase letters.

  3. Lowercase Letters – Specify the minimum number of lowercase letters.

  4. Digits (0-9) – Define the minimum number of numeric characters.

  5. Special Characters – Set the minimum number of special characters (e.g., !@#$%^&*).

Tip: A stronger password includes a combination of letters, numbers, and special characters.

Enable Password Expiration Optional

Check Enable password expiration to require users to change their passwords after a set period. Set the expiration timeframe based on your security requirements.

Add Disallowed Terms Optional

Input specific words or phrases that cannot be used in passwords (e.g., company name, common terms).

Note: Separate disallowed terms using line breaks.


How Password Policies Affect Users

  • Users will see the password requirements during password creation or change.

  • Passwords that do not meet the set criteria will trigger an error message displaying the unmet requirements.


Frequently Asked Questions

Q: What happens when a password expires?
A: Users will be prompted to create a new password upon login.

Q: Can I enforce multi-factor authentication (MFA) alongside password policies?
A: While this article focuses on password policies, refer to the MFA/2FA setup guide for additional security measures.

Did this answer your question?