Configuring password update settings
Configuring password update settings include enabling self-service password updates and setting up strength requirements for newly created passwords.
People > Settings > Registration Settings
Admin Console: People > Settings > Password Reset
Admin Console: System > Settings > Password Control
For more information about the available password update settings, see Password update settings.
To enable and configure password reset:
-
In the Admin Console, go to People > Settings > Registration Settings.
-
Under Security, in the Password Strength Check section, specify how strong each user password must be.
You can select one of the predefined options or select Use custom password parameters and set the following requirements:
Parameter Description Default Max length The maximum length of a password. 128
Min length The minimum length of a password. 12
Uppercase The minimum number of Latin uppercase letters [A-Z]
in a password.1
Lowercase The minimum number of Latin lowercase letters [a-z]
in a password.1
Numerals The minimum number of digits 0-9
in a password.1
Special characters The minimum number of special characters (for example, !
,@
, or%
) in a password.1
Characters that must be changed from old password The minimum number of symbols that must be changed from an old password when updating a password. 1
-
In the Human Input Validation section, select Enabled to present a captcha to users.
-
Click Save Settings.
-
Go to People > Settings > Password Reset.
-
Under Password Resetting Status, select Enabled.
This enables user to change their passwords themselves.
-
Click Save Settings.
-
Go to System > Settings > Password Control.
-
Under Password Reuse, select Enabled.
-
In Max history, specify the number of passwords after which the passwords may be reused.
Additionally, you can to configure the template of the email confirming the password reset. For more information about setting up email templates, see Setting up email.