Password Security

Password Security

Passwords are a secure method for authentication, and a way to protect your privacy. In an organization, passwords are the key to accessing authorized data, resources, applications, and more.
However, many techniques are used to steal your passwords and access data (i.e., phishing). These attacks lead to personal and corporate data breaches. Without secure passwords, hackers can steal and use your data.

To secure your organization's passwords and identity from such difficulties:

1. Set up a password length of at least 12 characters; it should be unique, complex, and a mixture of upper/lowercase letters, symbols, and numbers. The more complex a password is, the less chance there is of it getting hacked.
 
2. Use an identity provider (IdP). When a user needs to use any web application and tries to sign in, the web application redirects the user to their IdP. The IdP lets the user enter their credentials and verifies them. After the verification, IdP redirects the user to the web application and the user is signed in.
Here, the third-party application doesn't get the user's credentials—rather it is signed in through the IdP. It is used to check a user's identity, but it doesn't store the user's identity.
 
3. Implement two-factor authentication (2FA) or multi-factor authentication (MFA) methods on your account. Apart from entering a password, the user also has to provide another piece of information which is known only to them. Once the 2FA is enabled on your account, hackers will not be able to provide your second factor for accessing your account. Even if they crack your password, they won't be able to provide your biometric signature or the OTP that was sent to your mobile device.
MFA is similar to 2FA, but can involve more than two stages of verification.

To know more about password security and its best practices, click here.


        • Recent Topics

        • Linking an email to a Contact when the email is sent in deluge via sendmail

          The "to:" address in this code is a CRM Contact. Email address is forced unique in CRM This sendmail gets sent via a workflow which is in a custom module. It works, except that the outbound email does not appear (i.e, get linked to) the Contact such that
        • Re-emphasizing the importance of Domain Whitelisting in ASAP's JWT Authentication Mechanism

          The problem We discovered a security vulnerability related to using OAuth tokens in non-whitelisted domains and have reinforced our security measures. If you experience any request failures in the authorized domains, please verify that they are whitelisted
        • How do you arrange order in which the speakers are listed in a session once they have been selected?

          Probably another simple thing I've missed but I can't find how to arrange the order in which the speakers are listed in a session once they have been selected. We usually want the speakers listed alphabetically by last name, but sometimes not. Once the
        • How do you select/display the Speaker that will be the chair/moderator of a Session?

          I could very well be missing something but I can't see an option for displaying the Speaker that will be chairing/moderating a Session There doesn’t appear to be an option for this in the available Session fields I can can’t find anywhere that would allow
        • How do I connect a Google Cloud Project as a Custom Service

          How can I connect a Google Cloud project as a custom service to ZohoCRM? I need to pull YouTube Analytics data into CRM, but I cannot use the included YouTube service as it does not have the scopes I need. Therefore, I need to create a custom service.
        • email configuration - email is rejected - what is best way forward

          We started getting rejection/bounce back on email sent out of zohodesk. typically we have SMTP from our domain into zohodesk eg support@example.com our mail respones go back out as example : support@example.zohodesk.com These email bounce with error:
        • Sync Gmail for Admins

          Hello. We migrated from gmail to Zoho mail a few years ago, but some users want to be able to use gmail. I have set up dual delivery in the Zoho Mail Admin console. This is working fine. I can't figure out how to sync outgoing emails. Specifically, if
        • Passing Information from ZohoCRM to ZohoCreator

          I've got a use case where I'm attempting to use a button within ZohoCRM to pull a list of options into buttons on creator when page is loaded. I'm pretty well versed in Deluge, but I'm having a difficult time trying to understand how to dynamically place
        • Zoho mail down?

          I try to log in my Zoho mail and I get a file named "0.json", attached, downloaded instead. What is happening?
        • Main Company Email Blocked - Error 5545 5.1.8, Urgent Help Needed!

          We've been using Zoho Email for two years and all our email activity is hosted on this platform. Yesterday, our account was blocked with error code 5545 5.1.8 without any explanation provided. How can we get our account unblocked? We have all our emails
        • Housing Leads and Existing Customers

          We are a Software as a Service (SaaS) company offering subscription-based services. Our customers include individuals, businesses, and resellers who market our software to their clients. Currently, we use Zoho CRM solely for leads/deals, but we would
        • No more IMAP/POP/SMTP on free plans even on referrals with NO NOTICE

          Outraged. Just referred a colleague to use her domain (not posting it publicly here) to Zoho, just as I have other colleagues, clients, friends. Expected the exact same free plan features as I have and as everyone else I ever referred got. I was helping
        • Import for Apple Notes

          Hi, thanks to GDPR we can now retrieve a full download of Apple Notes via https://appleid.apple.com/ It would be great if we could migrate to Zoho this way, especially because attachments in the notes could be safely included in the import. Thanks and
        • Simple Deluge Script

          Hi. I'm brand new to functions but I'm trying to create a script to convert a date field in Meetings to a written format. For example, instead of 02/05/2025 8:00AM, I'd like to convert it to Wednesday, February 5, 8:00 AM. My Date field is the API Name
        • Why hasn't Zoho CRM For Everyone been rolled out?

          I don't understand the point of rolling out new features so slowly after a big fanfare launch 8 months ago. I've signed up for 'early access' and also contacted my point of contact, but nothing. Not even an auto reply. Would you say that this is good
        • Create Pop up notification on Contacts that there's an "Open Deal".

          I am trying to create Pop up notification on Contacts whenever there's an "Open Deal" on that contact. I am new to Zoho but figured out that this can be done with a Client Script. I got the code below and created the script however its not working. What
        • Editing landing page after signup for a webinar

          Hi, how can I edit the landing page after signing up for a webinar. I personalized the email "registration confirmation", which is working fine. Nevertheless after submitting the form, the participant gets redirected to a page, which looks like the standard
        • How to Send Weekly Scheduled Emails of a Custom View

          Greetings, We have a custom view called "All Employee View" for the Employee form. We are able to manually export that view using the "Export" button: However, we want to programmatically export this view as an XLS file each week and send it in an email
        • Determine which Notebook a Card is in?

          How can I find out which Notebook a Card is in? I.e. I search on "septic" and find that there is a Card named "Septic Status" but I need to know which Notebook it is in because I want to move it to a particular one.
        • Scroll to Bottom

          When scrolling a long list of notes within a Notebook, a "Scroll to Top" link appears. It would be very helpful to me if a "Scroll to Bottom" link was also provided. The same links would also be much appreciated if shown when scrolling within a long
        • All time fullscreen start -_-

          in new version ''Notebook'' progam start at full screen,it make my eyes bleeding when i use it. Becouse it start at full white bright screen ,even at night or dark mode. Can you fix this? make option to not start at fullscrn, or make program remember
        • Marking a Desk ticket as Unread after merge

          We have a custom script that runs against every new ticket and auto-merges it with any existing ticket that matches our criteria. That works fine but there is no functionality that reverts the newly-updated ticket back to an "unread" state. I found the
        • Automated Messages in Zoho Desk - WhatsApp

          Hi, We set-up an automated message reply to our whatsapp channel for our support that was connected to the zoho desk. I need to change these automated messages but am unable to find the place where I can make these changes. Anyone able to assist?
        • Restrict Announcement Pop-ups to Administrators in Zoho Desk

          Dear Zoho Desk Support Team, We are writing to request a feature enhancement that would allow organizations to restrict announcement pop-ups to administrators only. Currently, announcement pop-ups are sent to all users within a Zoho Desk organization,
        • Work Orders / Bundle Requests

          Zoho Inventory needs a work order / bundle request system. This record would be analogous to a purchase order in the purchasing workflow or a sales order in the sales cycle. It would be non-journaling, but it would reserve the appropriate inventory of
        • Upload and embed a video into an article?

          How can we upload a video and embed it into an article? It is possible for images but this only supports image files. And don't say it has to be uploaded to YouTube, Vimeo or DailyMotion in order to embed it. We're trying to create company documentation
        • For security reasons your account has been blocked as you have exceeded the maximum number of requests per minute that can originate from one account.

          Hello Zoho Even if we open 10-15 windows in still we are getting our accounts locked with error " For security reasons your account has been blocked as you have exceeded the maximum number of requests per minute that can originate from one account. "
        • Change default "Sort by"

          Is there a way to change the default "sort by" when searching across modules?" in Zoho CRM? Currently the default sort method is "Modified time" but i would like to utilize the second option of "relevance" as the sort by default and not have to change
        • Solution for setting up header and footer in a template

          Hi all, Emon need for business, I have long searched the forum and also how to put in my quote and my bills a header and a footer. And finally, I have an other working stream elements allowing me to meet my needs ... Given the number of people seeking the same thing as me, I say it might be good to share my discovery. It's simple and easy to implement First, start by adding the beginning of your HTML the following: <style> html {margin: 0;}  body {margin: 0;}  div # printhead { display: block;  position:
        • Embed links between Learn manuals and articles

          Is there a way to embed links so that the user can access different Learn articles, from within an article? For example, in a Billing manual, in an article on New Client Billing, can I link to an article in a Records manual on Client File Setup? Thanks
        • Zoho Analytics Triggers & Action Deprecation - Why So Much Manual Intervention Needed?

          I understand that APIs evolve and that updates need to happen. However, the way that the Zoho Analytics update is being rolled out is making life on users very difficult. First of all, the whole idea of forcing users to manually reconstruct Flows with
        • Allow all Company Users to view all projects, but only owner/admins can change projects

          I was wondering if there was a permission setting I could adjust to allow all our company users to see all projects created. Then, only the project owners and admins with the change permission. Thanks
        • Proceed with SSL certification for your domain

          Hi Team For white labelling of Zoho Survey, we have done the following things Domain Mapping Go to your domain provider's Admin Console Create a CNAME entry under your domain Edit the CNAME to survey.cs.zohohost.in Kindly proceed for the SSL Certification
        • How to separate Vendor custom fields from Customer custome fields

          Hi, Customer and Vendor form are separated in Books. We are synchronising them with (respectively) CRM Accounts and CRM Vendors. We add Customer Fields in Customer & Vendors Fields in Books as the CRM has some we need to synchronize. But Books shows Vendors
        • Adding Attachment to Desk Ticket via Deluge

          Hello, My team has a process where some people are entering information into a workbook in Zoho Sheet, and we need to get a copy of workbook into a ticket in Desk. We currently have a 'Submit' button on the Sheet that triggers a webhook to Flow, and from
        • Field value permission to set for automation to work as expected?

          I would like confirmation on the CRM software behaviour with the following configuration. A while ago I had discovered the solution by trial-and-error and now I don't remember what the conclusion was. I have a picklist field in the layout that I only
        • Zoho One Dashboard is not loading.

          Hi, Is anyone else experiencing a problem with the Zoho One Dashboard not loading? We started seeing the screen below on Friday afternoon and support has not responded regarding the same. Zoho One team, what's going on?
        • Error when trying to categorize bank transactions

          I am trying to categorize my bank transactions. It was going fine, I categorized 50 or so transaction and suddenly I started getting an error that reads: "Transactions cannot be matched as the account you are trying to match it to, is different.". I select
        • How to Delete, Disable, or Remove Streams from the Mail App?

          Is there a way to remove Streams from the mail app sidebar? I get too many notifications, it doesn't add any value to Zoho's functionality (especially since you can just make comments inside an email), and is distracting. I do not want notifications/alerts
        • When Zoho Tables Beta will be open to EU data center

          Hello all, We in EU are looking at you all using and testing and are getting jealous :) When we will be able to get into the beta also? We don't mind testing and playing with beta software. Thank you!
        • Next Page