Set a password policy for Mobile

Set a password policy for accessing the Mobile application.

A password policy is a set of rules that controls how passwords are used and administered for the Mobile application. These rules can ensure that users change their passwords periodically and their passwords meet the organization’s password complexity requirements. The rules can also restrict the reuse of old passwords, and ensure that users are locked out after a specific number of failed login attempts.

When the Mobile application is installed, there is no password policy in effect until you create one.

When a password policy is in use, users of the Android V3 or higher operating system must complete the following steps when they want to uninstall the Connections app:

1. Go to Settings > Security > Device Administrators.

2. Clear Connections Security.

3. Uninstall the app.

To set or change a password policy:

1. Log in to the Mobile Admin console and click Device Settings.

2. Click the link to one of the supported operating systems. For example: Android

3. To delete the current policy, click Delete Policy. We cannot restore a deleted policy, create a policy, if required.

4. To disable the current policy, click Disable Policy. A disabled policy still exists so that we can edit it, if required. When you re-enable a policy, it is applied to devices from that point.

5. Modify the policy settings.

   Hover the cursor over a data field to display helpful information about the corresponding entry.

   Policy Name

   Enter a name for the policy.

   Password Type

   Select the type of password that users can choose; for example: numeric, alphanumeric, or complex.

   Complex passwords are supported in Android V3.0 and higher.

   Minimum Password Length

   Specify the minimum number of characters that a password must contain. The allowed range is 0-64; the default is zero means there are no restrictions.

   Maximum Number of Failed Attempts

   Specify how many login attempts are allowed. The maximum value is 16. A value of zero means there are no restrictions.

   Important: If a user exceeds the maximum number of login attempts specified by this setting, all the data on the device is wiped and the factory settings are applied.

   Auto-Lock (in minutes)

   Specify the number of minutes of inactivity that must elapse before the device is locked. The maximum value is 60. A value of zero means there are no restrictions.

   Password Expiration Timeout (in days)

   Specify the number of days that must elapse pass before passwords must be changed. The maximum value is 730. A value of zero means there are no restrictions.

   Users receive 24 hours notification before their passwords expire.

   Password History Count

   Specify the number of unique passwords required before one can be reused. The range is 0-50. A value of zero means there are no restrictions.

6. Click Save to save the changes. Alternatively, click Refresh to discard the changes.

Parent topic:
Configure security for Mobile