Passwords, sessions and lockout

Passwords

• At least 12 characters, with upper and lower case letters, a digit and a symbol.
• Passwords are stored securely and can never be read back.

Protection against guessing

• Repeated failed attempts temporarily lock the account. Wait a while and try again, or use Forgot your password.
• A wrong email and a wrong password produce the same message.

Sessions

• Sessions are short-lived and renew quietly while you work.
• Deactivating a user ends their access immediately.

Revoke sessions

Administrators can revoke all sessions for a user from the row menu on the Users page.