10 docs tagged with "password-policy"

Mechanisms to protect user accounts from brute force and credential stuffing attacks.

Overview

The password change process is a vital security feature that allows users to update their login credentials. This process ensures that users can maintain control over their account security by regularly updating their passwords or immediately changing them if they suspect any unauthorized access. Including a password change option on the user profile page enhances security, provides convenience, and empowers users to proactively manage their account safety. By enabling easy access to this feature, you promote a safer and more user-friendly environment.

Overview

Overview

Protect user accounts by enforcing strong password policies and detecting compromised credentials.

A password policy defines the password strength rules that are used to determine whether a new password is valid. A password strength rule defines how a password must be set and the guidelines it must conform to. For example, password strength rules might specify that the minimum number of characters of a password must be 5.

To set a password there are multiple use cases for how to use the different APIs and when to use which API.

Overview

When a user forgets their password and wants to request a password reset, this is called user-initiated password reset.