Password Policy¶
The Password Policy tab of the Security Settings page provides the Password Composition & Reuse, Password Expiration, and Minimum Password Age settings.
Only the administrator can configure the password policy, and IAM users can only view the configurations. If an IAM user needs to modify the configurations, the user can request the administrator to perform the modification or grant the required permissions.
You can configure the password policy to ensure that IAM users create strong passwords and rotate them periodically. In the password policy, you can define password requirements, such as minimum password length, whether to allow consecutive identical characters in a password, and whether to allow previously used passwords.
Password Composition & Reuse¶
Ensure that the password contains 2 to 4 of the following character types: uppercase letters, lowercase letters, digits, and special characters. By default, the password must contain at least 2 of these character types.
Set the minimum number of characters that a password must contain. The default value is 6 and the value range is from 6 to 32.
(Optional) Enable the Restrict consecutive identical characters option and set the maximum number of times that a character is allowed to be consecutively present in a password. For example, value 1 indicates that consecutive identical characters are not allowed in a password.
(Optional) Enable the Disallow previously used passwords option and set the number of previously used passwords that are not allowed. For example, value 3 indicates that the user cannot set the last three passwords that the user has previously used when setting a new password.
Changes to the password policy take effect the next time you or your IAM users change passwords. The new password policy will also apply to IAM users created later.
Password Expiration¶
Set a validity period for passwords so that users need to change their passwords periodically. The users will be prompted to change their passwords 15 days before password expiration. Expired passwords cannot be used to log in to the cloud platform.
This option is disabled by default. The validity period ranges from 1 to 180 days.
The changes will take effect immediately for your account and all IAM users under your account.
Note
After the password expires, users need to set a new password through the URL sent by email. The new password must be different from the old password.
Minimum Password Age¶
To prevent password loss due to frequent password changes, you can set a minimum period after which users are allowed to make a password change.
This option is disabled by default. The validity period ranges from 0 to 1,440 minutes.
The changes will take effect immediately for your account and all IAM users under your account.