Security poilicy - overview
Security policies consist of three parts; password policy, lost period settings, and session limit.
Password policy
Password policies allow you to set restrictions on how weak or strong your users' passwords should be. They'll be applied to users who are allowed to use passwords to sign in, based on their routing policy. The following parameters can be configured in a password policy:
Password complexity
- Minimum length for a password
- Mixed password: When this parameter is enabled, users will be forced to set passwords with both uppercase and lowercase alphabets.
- Minimum special characters
- Minimum numbers
Password age
- Maximum password age: After setting a new password, users will be forced to change it after the number of days specified in this parameter.
- Minimum password age: After setting a new password, users will be restricted from changing it for the number of hours or days specified in this parameter.
- Refusal of previously used passwords: When setting a password, users will be restricted from reusing their recently used passwords. This parameter defines the number of recent passwords that will be refused.
Password policies also have three presets; Strong, Good, and Fair to help you quickly define your policies if you need to.
Lock period settings
Lock period settings restrict unauthorized access to an account. By enforcing a timed lock-out when there are multiple sign-in attempts with incorrect credentials, these settings protect against potential hacking. The following parameters can be configured under lock period settings:
- Monitoring period: This is the timeframe within which the number of invalid sign-ins shouldn't exceed the maximum limit.
- Maximum invalid sign-ins: This is the number of tolerated invalid sign-ins within the monitoring period.
- Lock period: This is the amount of time users will be locked out if they exceed the acceptable maximum invalid sign-ins per monitoring period.
Session limit - concurrent sessions
Concurrent session limit defines how many places you can be signed in simultaneously. Every time you sign in from a new browser, app, or device, it will be counted as a session.
For example, a user who's concurrent session limit is 3 will be able to sign in to a browser on their laptop, a browser on their mobile phone, and one on their work PC. If they try to sign in again from a different browser or device, they will be asked to sign out of their existing sessions first.
This increases user's security by reducing the amount of places their account is left signed in and unprotected.
Access your files securely from anywhere
Zoho CRM Training Programs
Learn how to use the best tools for sales force automation and better customer engagement from Zoho's implementation specialists.
Zoho DataPrep Personalized Demo
If you'd like a personalized walk-through of our data preparation tool, please request a demo and we'll be happy to show you how to get the best out of Zoho DataPrep.
- Zoho Workerly Home
- Forums
- Connect With Us:
- Zoho Recruit Home
- Forums
- Connect With Us:
New to Zoho Writer?
Create. Review. Publish.
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho Marketing Plus?
Everything you need to run your marketing
New to Zoho Marketing Plus?
Everything you need to run your marketing
You are currently viewing the help pages of Qntrl’s earlier version. Click here to view our latest version—Qntrl 3.0's help articles.
New to Zoho Survey?
Zoho Sheet Resources
Zoho Forms Resources
New to Zoho Sign?
Zoho Sign Resources
Sign, Paperless!
New to Zoho TeamInbox?
Zoho TeamInbox Resources
New to Zoho ZeptoMail?
Design. Discuss. Deliver.
New to Zoho Workerly?
New to Zoho Recruit?
New to Zoho CRM?
New to Zoho Projects?
New to Zoho Sprints?
New to Zoho Assist?
New to Bigin?
Related Articles
Security Policies - Overview
Security Policies provide you with a customizable password policy and advanced settings. Enforce users to create a strong and secure password with password policy. The user's concurrent sessions and lock period setting can be configured with the ...Configure lock period settings
Pre-requisites Org owner Org admin To access and impose lock period settings Log in to Zoho One , then click Admin Panel. Go to Security from the left menu. Click open a security policy. If there isn't one added, learn how to add a security policy ...Edit security policy
The steps to edit security policy vary for the User Interface versions supported in Zoho One. Select the UI version you use from the tabs below and proceed with the steps that follow. Spaces UI Unified UI Spaces UI Sign in to Zoho One, then click on ...Add security policy
The steps to add security policy vary for the User Interface versions supported in Zoho One. Select the UI version you use from the tabs below and proceed with the steps that follow. Spaces UI Unified UI Spaces UI Sign in to Zoho One, then click on ...Configure password policy
Passwords are the most commonly used authentication factor. Many users reuse the same, insecure password for all their online accounts, compromising their organization's security. To protect yourself from this common pitfall, make it mandatory for ...
New to Zoho LandingPage?
Zoho LandingPage Resources