Configure a password policy

Configure and edit the password policy in Cortex XSOAR 8.10 On-prem.

To define your password policy, go to Settings & Configurations → Settings → Access Management → Password Policy.

You can define your password policy using the following parameters:

• Minimum number of characters
• Minimum number of lowercase letters
• Minimum number of uppercase letters
• Minimum numbers of digits or symbols

In addition, you can require users to change their password every X number of days or months. By default, this setting is not enabled and passwords do not automatically expire. You can also prevent users from reusing previous passwords.

The lock settings enable you to lock a user out of Cortex XSOAR after a set number of failed login attempts within one minute. You can either have the user automatically unlocked after a set number of minutes or hours, or you can only allow the user to be unlocked by an administrator. To unlock a user, go to Settings & Configurations → Settings → Access Management → Users, right-click on the username, and select Unlock.

Users can change their passwords by clicking the username at the bottom of left hand main menu and selecting User Preferences → Details.