Password Policy Management

We have introduced enhanced password policies that offer administrators greater control over user account security. With the new password policy settings, administrators can set password expiration time frames and enforce password history rules. Here you will find the steps to configure these settings in the Security tab of your Kenjo account. 

Password Policy Settings

Once as an Admin you are logged into your Kenjo account you can find the feature by clicking on Settings and then selecting Security. After that, you can find it under Password Policy > Settings here you will be able to set up all the passwords requirements for all the users in your Kenjo Account.

Default requirements

These are three mandatory conditions that the password of the users in your Kenjo account must comply with, they cannot be changed or modified, because all the passwords should always have:

• A minimum length of 8 characters.
• At least should have one letter and one number.
• Letters must be in mixed case (upper case and lower case).

Expiration Time Frame

This is a feature that helps enhance security by requiring users to change their passwords periodically. To set an expiration time: go to Password Policy > Settings you should find Custom requirements.

Enter the desired time frame for password expiration. For example, if you set it to 90 days, users will be prompted to reset their passwords every 90 days.

Click Save to apply the changes.

History Rules

The password history setting prevents users from reusing previous passwords, ensuring stronger password choices. To configure password history rules:

Right under the expiration tab, you will find the Password History section.

Select from the list the number of previous passwords to remember. For instance, if you set it to 5, users cannot reuse their last five passwords.

Click Save to save your changes.

Note: Kenjo saves all the passwords created after the 6th of July, 2023 so that the users must use a new, unique password when changing passwords.
 
No worries, all the data is properly encrypted and your passwords are safe!

Employee Experience with Password Expiration

When the password expiration time frame is reached for an employee, and the employee attempts to log in with their current password, they will be automatically redirected to a password reset screen. 

On the password reset screen, the employee must enter a new password that meets the password requirements you have previously set up.

After successfully resetting the password, the employee will be able to log in with the new credentials.

By configuring password expiration time frames and enforcing password history rules, Admins in Kenjo can ensure that user passwords remain strong and regularly updated.

For further assistance or inquiries, feel free to contact our support team at support@kenjo.io