eCompliance New Password Rules

As of August 7, 2024, we enhanced the rules on setting new or renewing passwords. See below for details on how to meet the updated requirements:

1. Minimum Length - 10 characters or more.
2. Expired Passwords - No previously used passwords.
3. Complexity - No common patterns like dates, repeating characters (aaa), sequences (abcd), keyboard patterns (qwertyuiop).
4. Blacklisted Terms - No passwords that have 4 characters or more matching any single or combination of the following terms found in the user’s profile:
   • Phone number
   • First Name
   • Middle Name
   • Last Name
   • Username
   • Email address
   • Company Name
   • Organization Name
   • Invitation Codes

Using an example of someone called Jon Snow working for House Stark with the phone number (403) 243-2506, here are some passwords that will be rejected:

• Snowbird2!
• Sn0w@2506
• Jon2506
• HouseStark2!
• Hous_Star_k2!