The Password Policy page lets you define the advanced password settings that apply to your users.

You can define the eligible domains by typing them in the domain field.

You can also set the password requirements: the minimum password length, the password complexity, and the period for which a password remains valid. Password history can be enabled or disabled.

You can optionally activate one-time password (OTP). Once it is activated, select the OTP sending method: Email, SMS or Authentication App.

To strengthen data security, you can enable temporary or permanent lockout with the switch in the Lockouts section. Users who are locked out temporarily or permanently are listed on the Banned Users page, where the ban can be lifted.

To apply your changes, click Save at the top right of the screen.