What are the password criteria?

Passwords must:

• Be a minimum of eight (8) characters in length

• Contain at least one character from each of the below categories:
  • Uppercase alphabet characters (A–Z)
  • Lowercase alphabet characters (a–z)
  • Arabic numerals (0–9)
  • Non-alphanumeric characters ("!#$%&'()*+,-./\:;<=>?@[]^_`{|}~)

• Not be a prior account password from less than 10 password changes ago

• Not be a common password such as password or username

The system will lock users out after three (3) consecutive invalid login attempts. Automatic account unlock is employed and configured to lock for at least 1 minute.

User account passwords will expire after one (1) year.