Set strong password strength rules to enhance your account security.
Risk description
When you enable console logon for a Resource Access Management (RAM) user, you can set a logon password. Your password policy is considered insecure if it has any of the following settings. An insecure policy can lead to password leaks, which allows an attacker to use the leaked password to log on to the console and create security risks.
The password is less than 8 characters long.
The password contains fewer than three character types.
The password expires after more than 90 days.
The password retry constraint must be a value greater than 5.
Risk level
Threat level: High.
Best practices
Configure a password policy with a high password strength.
Recommendations
Password length: Set the minimum length to 8 or more characters. The password can be 8 to 32 characters long.
Required character types: Specify that the password must contain at least three of the following character types: uppercase letters, lowercase letters, numbers, and symbols.
Password validity period: Set the password to expire in 90 days or less.
Logon retry limit: Set the maximum number of consecutive failed logon attempts to 5 or less. If a user reaches this limit, their account is locked for one hour.
For more information, see Set a password policy for RAM users.
Difficulty
Easy to manage.