Password Policies

Quick Reference

Password requirements and management policies for VM users and systems.

Password Requirements

Minimum Standards

• Length: Minimum 12 characters
• Complexity: Must include uppercase, lowercase, numbers, and special characters
• History: Cannot reuse last 5 passwords
• Expiration: 90 days maximum
• Account Lockout: 5 failed attempts, 30-minute lockout

Complexity Rules

• At least 1 uppercase letter (A-Z)
• At least 1 lowercase letter (a-z)
• At least 1 number (0-9)
• At least 1 special character (!@#$%^&)
• No dictionary words or common patterns
• No personal information (name, username, dates)

Check Password Quality

• Online Tool: PasswordMonster (https://www.passwordmonster.com/) - Safe, local password strength testing