Enforce Password Security

Each password should meet or exceed the minimum requirements for the application. For example, a password may need to:

  • Contain a minimum of eight characters.
  • Contain at least one upper case character, and one alphanumeric character.

For more information, see the documentation for the application you are configuring.

Oracle enables a database administrator to enforce various rules about passwords at the database level, including setting a password lifetime, after which users must set a new password; disallowing reuse of previous passwords; locking an account after a user attempts to log on a specified number of times; and creating complexity rules for passwords through a PL/SQL function. For more information, see the Oracle Clinical Administrator's Guide.