Password Policy

A password policy is a set of rules designed to enhance computer security by encouraging users to employ strong passwords and use them properly.

Password complexity requirements

Sitecore Content Hub enforces a strict Password policy:

• The required length of the password is a minimum of six characters.
• The password must contain at least one lowercase letter: a to z.
• The password must contain at least one uppercase letter: A to Z.
• The password must contain at least one digit or number: 0 to 9.
• The password must contain at least one special character, e.g.: ! & @ # $ % \* .

Password expiration policy

A new password lives for 90 days before expiration. After this time, the password needs to be reset.

Password history

There is no history of previous passwords kept.

Password configuration

The default password configuration, described above, can be changed via the Authentication configuration, which is found under PortalConfiguration located on the Settings page.

On the Manage page, search for and select Settings

On the Settings page, search for and select Authentication. Toggle the display to Text and search for the PasswordRules section of the Authentication configuration.

The default values are shown but can be edited:

"PasswordRules": {
    "RequiredLength": 6,
    "RequireLowercase": true,
    "RequireUppercase": true,
    "RequireDigit": true,
    "RequireNonLetterOrDigit": true
  },

Once edited as required, click on Save.