AL: How To Edit the Password Policy

The Hook ALICE provides a strict set of minimum password requirements to protect your account from unauthorized access. Use this workflow to edit your property's Password Policy to enforce even greater security.

 

Before you begin...

• Requires at least Hotel User Admin User Type access.
• The Password Policy cannot be edited to contain less than the default minimum requirements (12 characters, including numbers and symbols, and a mandatory password rotation every 60 days).
• If the Password Policy is updated, users will be automatically required to update their passwords the next time they attempt to access ALICE.
• Actabl highly recommends using a native password manager on your devices to facilitate a smooth and secure login process

The Steps

1. Select Security & Data Privacy from the ALICE Admin menu.
2. Use the + and - signs, or simply type in the field to edit the default requirements. Review the definitions below to learn more about each of the Password Policy requirements.
3. Select Save to apply the changes.

The Result Success: The new password policy is successfully saved, and users will be prompted to create a new password adhering to these rules upon their next login.

 

Reference: Password Policy Definitions

Requirement Field	Definition
Password Length	Minimum number of total characters required.
Number of letters (lowercase and UPPERCASE)	Minimum number of total letters required.
Number of letters (lowercase)	Minimum number of lowercase letters required.
Number of letters (UPPERCASE)	Minimum number of uppercase letters required.
Number of digits	Minimum number of numbers required.
Number of special characters	Minimum number of special characters required.
Number of character classes	Minimum number of character classes (letters, digits, special characters) required. Must be set to “None”, 3, or 4 to avoid conflict with other requirements.
Number of previous passwords to restrict	Restricts the user from reusing previously used passwords (e.g., setting this value to 2 will restrict a user from using their last 2 passwords).
Password expires in (days)	Sets a password expiration timeframe (Minimum is 2 days). Users will be required to reset their password every set number of days.
Warn before password expires (days)	Sets a warning to display a certain number of days prior to the password expiring (Minimum is 1 day). Note: This field will only be available if password expiration is enabled.

We highly recommend using a password manager on your devices to facilitate a smooth yet secure login process. Most devices support a native password manager option included on the device for free. Additionally, ALICE and the rest of Actabl has plans to continue enforcing great security posture practices, like SSO and MFA, and will continue to communicate them ahead of time so you can best plan and prepare.  

CISA, America’s Cyber Defense Agency recommends strong and unique passwords at the workplace. For more password requirement best practices, please see: https://www.cisa.gov/secure-our-world/require-strong-passwords