Property | Requirements |
Characters allowed | A – Z a – z 0 – 9 @ # $ % ^ & * – _ ! + = [ ] { } | \ : ‘ , . ? / ` ~ ” ( ) ; blank space |
Characters not allowed | Unicode characters. |
Length constraints | A minimum of 8 characters and a maximum of 256 characters. |
Password restrictions | Requires three out of four of the following Lowercase characters. Uppercase characters. Numbers (0-9). Symbols (see the previous password restrictions). |
Password expiry | Default value is 90 days. |
Password expiry notification | Default value is 14 days. |
Password change history | The last password can’t be used again when the user changes a password. |
Password reset history | The last password can be used again when the user resets a forgotten password. |
Account lockout | After 10 unsuccessful sign-in attempts with the wrong password, the user is locked out for one minute. Further incorrect sign-in attempts lock out the user for increasing durations of time. |