Skip to content
This repository has been archived by the owner on Jan 29, 2024. It is now read-only.

Commit

Permalink
Update password policy article
Browse files Browse the repository at this point in the history
  • Loading branch information
staceysalamon-aiven committed Nov 6, 2023
1 parent 758c756 commit 9206444
Showing 1 changed file with 14 additions and 22 deletions.
36 changes: 14 additions & 22 deletions docs/platform/reference/password-policy.rst
Original file line number Diff line number Diff line change
@@ -1,45 +1,37 @@
Password policy
===============

Aiven is committed to keeping your account secure. Creating a strong password makes it harder for attackers to gain unauthorized access to your account.
Aiven is committed to keeping your data secure. Creating a strong password makes it harder for attackers to gain unauthorized access to your account.

**Password Requirements**
Creating a strong password is a first step in securing your account. You can add another layer of security by :doc:`enabling two-factor authentication </docs/platform/howto/user-2fa>`.

To ensure your password is safer, Aiven enforces a number of password criteria that make sure that the password is strong:
Password requirements
-----------------------

- Minimum password length is 8 characters
Aiven enforces the following rules for password strength:

- Minimum length is 8 characters

- Cannot contain single repeating characters such as ``aaaaaaaa``

- Cannot contain your name or email address

- Cannot contain common words, phrases or strings such as password, security, ``John``. Using common words or service names can be easily guessed.

- Cannot contain words that are very similar to common words such as ``password1``.
- Cannot contain common words, phrases, or strings such as password, security, or common names

.. note::
For **new user** sign ups, these requirements are automatically enforced.
- Cannot contain words that are very similar to common words such as ``password1``

.. note::
For **existing customers**, while it is not required to change password immediately, it is strongly recommended to update your existing password. When changing your password, the above requirements will be enforced.
These rules are also used for service integration passwords. For remote services (for example, sending logs to an external OpenSearch® service), these rules are not enforced, but they are recommended.

When creating **integration** passwords on Aiven's end, the above requirements are also applied. For remote services such as sending logs to external OpenSearch®, the requirements are not applied, but are recommended.

Additionally, when creating and/or resetting the password, please consider the following tips:

Password tips
-------------

- Use password manager to create a randomly generated strong password

- Use passphrases instead of passwords which are even harder to guess
The following are some suggestions for creating or resetting your Aiven password:

- Do not use same password for multiple services
- Use a password manager to create a randomly generated strong password

- Select a password that is not usual and memorable only to you
- Use passphrases since these are harder to guess

Selecting a strong password is a first step in securing your account. To know more about how you can strengthen your security by adding a two factor authentication, please refer to :doc:`../howto/user-2fa`.
- Do not use the same password for multiple services

If you forget your password, you may reset your password by selecting **Forgot Password** on the `Aiven Console login <https://console.aiven.io/>`_ page.

If you have any questions, please feel free to contact the support team via support@Aiven.io to assist you.

0 comments on commit 9206444

Please sign in to comment.