During the first half of 2023, WeThrive have been updating all data protection and security practices & policies. We are pleased to announce that we have received our Cyber Essentials accreditation. Download the certificate below. Next, we will be working towards Cyber Essentials Plus.
As part of this work, there are some new measures in place within the WeThrive platform to ensure user accounts are as secure as possible. More on these below.
Secure passwords
User passwords now have a set of criteria they must meet to be accepted including:
No common words
At least 12 characters
Mix of upper and lower case characters
At least 1 non-alphanumeric character e.g. &, !, %
If a user's password does not currently meet this criteria, the user will be sent a password reset email the next time they attempt to log in.
Throttling
We have also implemented a throttling feature that locks a user out of their account after 10 unsuccessful login attempts. To unlock the account, the user must contact WeThrive at support@wethrive.net and confirm their identity.