Skip to main content
Druva Documentation

Configure password policy for users and administrators

inSync Cloud Editions: File:/tick.png Elite Plus File:/tick.png Elite File:/cross.png Enterprise File:/tick.png Business

Overview

  • Only a Druva Cloud administrator can set a password policy for all the administrator accounts. 
  • A Druva Cloud administrator can configure the password policy from either the Druva Cloud Platform Console or the inSync Management Console. 
  • A password policy configured on the Druva Cloud Platform Console is replicated automatically over the inSync Management Console. And a password policy configured on the inSync Management Console is replicated automatically over the Druva Cloud Platform Console.
  • Click the Druva logo druva_logo.png on the menu bar to launch the Druva Cloud Platform Console. See Create a password policy for more information.

A password policy is a set of rules that encourage the use of strong passwords for ensuring added data security. inSync supports password policies for the users and administrators. You can define a password policy such that:

  • Strong passwords are mandated. A password is strong if it is at least 12 characters long and contains at least one alphabet [a-z, A-Z], one numeric character [0-9], and one special character.
  • A given number of preceding passwords used to login cannot be reused
  • The number of login attempts is defined. When this limit is reached, inSync locks the account for an hour.
  • Mandate password change at regular intervals.

Enable password policy for administrators

To enable password policy for administrators

  1. On the inSync Management Console menu bar, click  > Settings.
  2. Click the Password Policy tab.
  3. Under the Password Policy Settings For Administrators area, click Edit. The Password Policy Settings For Administrators window appears.

    new PP from inSync.PNG

  4. Provide the appropriate information for each field.
    Field Action
    Enable Password Policy If you want to enable password policy for the administrators, select this check box. Additional fields appear.
    Enforce Strong Password

    If you want to enforce strong password policy, select this check box.

    A strong password is:

    • Contains minimum 12 and maximum 64 characters
    • Contains a combination of alphanumeric and special characters
    • Alphanumeric characters include numbers and upper-case and lower-case letters

    A strong password is hard to guess for people with malicious intent and secures the login experience.

    Note: Strong password policy is, by default, enforced in inSync GovCloud environment.

    Cannot reset password to last

    Type the number of previous passwords that the administrator cannot use.

    The minimum value can be set to 0 and maximum value as 9.

    For example, if you enter 3, then the administrators cannot set their new password to the current password and the previous two passwords.

    To allow the administrators to use any of their last passwords except the current password, type 0.

    Note:

    • If you disable the password policy at a later stage, previous passwords history is erased permanently.
    • In inSync GovCloud environment, by default, the administrator cannot reset their password to last 24 passwords.

    Minimum lifetime for password

    (Applicable in inSync GovCloud environment only)

    Type the number of days that you want a password to be used before the administrator can change it.

    Recommended value range is between 1-60 days.

    Recommendation

    Set Minimum lifetime for password age to a value of 1 day. Setting the number of days to 0 allows immediate password changes.

    Max. invalid login attempts

    Type the maximum number of login attempts.

    The minimum value can be set to 0 and maximum value as 9.

    An administrator's account is locked after the number of invalid login attempts exceeds the number you specify here. 

    For example, if you enter 3, then the administrator can make a maximum of 3 invalid login attempts before the administrator's account is locked.

    Unlimited invalid login attempts are allowed if you enter 0.

    Passwords expire after every

    Type the number of days after which the administrator must reset the password.

    The minimum value can be set to 0 and maximum value as 99.

    A password never expires if you enter 0.

    Recommended value range is 1 to 60 days. 

  5. Click Save.

Enable password policy for users

To enable password policy for users

  1. On the inSync Management Console menu bar, click  > Settings.
  2. Click the Password Policy tab.
  3. Under the Password Policy Settings For Users area, click Edit. The Password Policy Settings For Users window appears.

    PasswordPolicyforUsers.png

  4. Provide the appropriate information for each field.
    Field Action
    Enable Password Policy If you want to enable password policy for the users, select this check box. Additional fields appear.
    Enforce Strong Password

    If you want to enforce strong password policy, select this check box.

    A strong password is:

    • At least 12 characters long
    • Contains a combination of alphanumeric and special characters
    • Alphanumeric characters include numbers and upper-case and lower-case letters

    A strong password is hard to guess for people with malicious intent and secures the login experience.

    Note: Enforce strong password policy is, by default, enabled in inSync GovCloud environment.

    Cannot reset password to last

    Type the number of previous passwords that the administrator cannot use.

    For example, if you enter 3, then the administrators cannot set their new password to the current password and the previous two passwords.

    To allow the administrators to use any of their last passwords except the current password, type 0.

    Note: In inSync GovCloud environment, by default, the user cannot reset their password to last 24 passwords.

    Minimum lifetime for password

    (Applicable in inSync GovCloud environment only)

    Type the number of days that you want a password to be used before the user can change it.

    Possible value range is between 1-60 days.

    Recommendation

    Set Minimum lifetime for password age to a value of 1 day. Setting the number of days to 0 allows immediate password changes.

    Max. invalid login attempts

    Type the maximum number of login attempts.

    An administrator's account is locked after the number of invalid login attempts exceeds the number you specify here. 

    Passwords expire after every Type the number of days after which the administrator must reset the password.

    Recommended value range is 1 to 60 days.
  5. Click Save.