ACT! Security Model 6

Rex

Password Policy

The Password Policy dictates the parameters of password use for all users of the database. The ACT! administrator determines the Password Policy. This functionality provides an additional level of protection for the ACT! database. By default, no password is required and no password parameters are defined. The ACT! administrator can permit individuals to choose whether or not they use a password, or set any combination of the five optional password settings. The administrator sets password parameters by selecting Password Policy on the Tools menu. When a password policy has been defined, it applies to all users of the database.

Password Policy parameters are:

Re-use• – Restricts the use of recently used passwords. Example: Users cannot reuse their
last two passwords.

Change interval• – Sets the maximum length of time a password can be used. Example: Users must reset passwords every 90 days.

Minimum duration between changes• – Sets the minimum duration length of time a password can be used.

Length• – Sets the minimum number of characters a password must contain.

Required number of character groups• – Specifies the number of character types
the password must incorporate.
o Lower-case (a-z)
o Upper-case (A-Z)
o Numeric (0-9)
o Special Characters (printable Extended ASCII set)