Password Policy for ClearCompany User Accounts

All system users need to adhere to ClearCompany's password policy when creating or resetting login credentials. This is to ensure the security of the ClearCompany platform as a whole and the individual/organization accounts.

In this article:
Available Password Policy Options
Default Password Policy
Changing your Organization's Password Policy
FAQs

Available Password Policy Options

ClearCompany has three password policies with varying guidelines that can be set at the organization level. For security purposes, the default Strict policy is recommended. 

1. Strict - the default policy applied to all ClearCompany accounts. This policy has the most complex password creation guidelines to increase account security.
   
2. Lenient - this policy only requires a minimum number of characters (8) when creating a password.
   
3. Custom - this policy is a great choice for organizations who wish to customize the password creation guidelines to fit their organization's security needs. 
   

Default Password Policy

The default password policy applied to all ClearCompany managed user accounts (those not utilizing Single-Sign On for login) is the Strict policy.

This policy requires users to create a password that meets the following criteria:

• Minimum of 8 total characters
• At least 1 upercase letter
• At least 1 lowercase letter
• At least 1 digit
• At least 1 special character
• Maximum of 5 repeating characters allowed
• Maximum of 3 sequential characters allowed

Changing your Organization's Password Policy

The password policy for your organization is managed on the backend of your account. Please have the main point of contact at your company reach out to the ClearCompany Support team or your Customer Representative for assistance in changing this setting.

FAQs

How will changing the password policy affect current users?

• Your users will be able to keep their current passwords until they need to reset their login credentials. This means that if one of your users currently has the password "password," they would keep this until they forgot it and had to reset it, or you sent them a password reset email. When prompted to reset, they would have to follow the password policy enabled for your organization.

Can the password policy be changed for a single user?

• No. The password policy designated for the organization will apply to all users.