Skip to content

Password policy

Rules for a strong password

Protecting your account starts with a strong password. In Data X-Ray, passwords need to follow these rules:

  • Must contain at least 8 characters (max. 32 characters).
  • Must have a mixture of letters and numbers.
  • Does not allow number sequences of 4 or more numbers.
  • Does not allow whitespaces.

Multi-factor authentication

An administrator may require all users to use multi-factor authentication when logging into the application or console. Users must configure an authentication application by scanning a QR and providing a TOTP code in order to log into the application.

Password security features

Account lockout protection

Note

This security feature only applies to username/password authentication.

To protect accounts from unauthorized access attempts, Data X-Ray implements account lockout measures:

  • After 10 consecutive failed login attempts, the account will be locked for 24 hours.
  • During the lockout period, login attempts will be rejected even with correct credentials.
  • This protection applies to all user types including regular users, organizational admins, and super admins.

Password reuse prevention

To maintain strong security practices, Data X-Ray prevents the reuse of previous passwords:

  • When changing your password, you cannot reuse any of your previous passwords.
  • If you attempt to reuse a previous password, you'll receive an error message prompting you to select a new, unique password.

For environment variable configuration related to these security features, refer to the 7.17 release notes.

Tips for a strong password

Here are some tips to help keep your information secure:

  • Use at least 12 characters: longer passwords are harder to crack.
  • Mix it up: combine uppercase and lowercase letters, numbers, and special characters (like !, @, #, or $).
  • Avoid common words and patterns: skip obvious choices like "password123", your name, or birthdate.
  • Use unique passwords: don't reuse the same password across different sites or applications.