Minimum Password Policy Requirements

OpenAir enforces the following minimum policy requirements:

• Password History — Users cannot reuse the last two passwords in their password history.

• Password Complexity Verification — Complexity verification checks that each password is complex enough to provide reasonable protection against intruders who try to break into the system by guessing passwords.

  • Minimum length of 8 characters.

  • Must contain at least 3 of the following types of characters: uppercase letters , lowercase letters, numbers, or special characters.

  • Not equal to user ID.

• Password Lifetime and Expiration — The maximum lifetime of a password is three months, after which they expire and must be changed on the next successful logging.

• Verify password before change — Users must enter their current password correctly when attempting to change their password. This also applies when users are prompted to change password when their password has expired or does not meet the password policy requirements. Any failed attempt at changing password counts toward the number of failed sign-in attempts allowed before locking the user account.