Skip to main content
It’s always a good idea to keep your site as secure as possible. Beyond settings like https, multi-factor authentication and firewalls, you can now set better password policies. Password complexity options allow you to set stricter rules for passwords to prevent users from creating weak passwords. Password expiration allows you to require users to change their passwords on a frequent basis. Let’s take a deeper look into these two settings.

​
Password Complexity Options

Password complexity allows you to set rules to require stronger passwords. To enable and configure password complexity options, go to Backend > Settings > Curator > Portal Settings. Under the general tab, you will find a section called Security. Expand that, and you can now find the Password Complexity Options toggle. Please note that in order to view and configure this setting, you must have Password Change or Password Reset settings (or both) enabled, which require you to use Tableau or Curator as your authentication: Once you toggle on Password Complexity Options, you will see three different options you can set to require stronger passwords: It’s a good idea to set a long length requirement, the longer the better, but don’t go too overboard or your users may want to write their passwords down on a Post-it note attached to their display. The first time you enable this setting, it will default to 10. Once enabled, you will now see these requirements on pages that allow you to set a password:

​
Password Expiration

Password expiration can be found on the same Portal Settings page and tab, right next to the Password Complexity Options. Like the prior option we looked at, you must have Password Change or Password Reset enabled to be able to view password expiration. Click the toggle to enable it, and you will now see you can set the number of days until user passwords will expire: If enabled, the login page will check to see if the user’s password is expired and, if so, redirect them to a page to set a new password. Once this is done, they will be able to log in with the new password. Setting a prudent expiration date, such as 90 days, and turning on password complexity options are easy, effective ways to make your Curator portal even more secure.