Password policies | PS Cloud

Password policies with Password Safe specify password composition requirements, such as password length and supported character types. Password Safe follows these policies when you change passwords.

Password Safe ships with a default password policy used to generate new passwords for auto managed accounts.

🚧

Important information

You can change the settings for the default policy, such as password length and complexity, but you cannot delete the default password policy.

ℹ️

• Ensure your Password Safe policies meet or exceed your organization's existing security standards across all platforms.
• Ensure the policies you create in Password Safe align with password complexity and restrictions in place on the managed system; otherwise, Password Safe might create a password that does not comply with the rules in place on that managed system.

1. Use a browser to sign in to your BeyondInsight/Password Safe URL.
   This URL is provided in the BeyondTrust welcome email and includes your site URL followed by /login.
2. From the left menu, click .
   The Configuration page displays.
3. Under Privileged Access Management Policies, select Password Policies.
   The Password Policies page displays.
4. Click Create New Password Policy.
5. Enter a name for the password policy.
6. Click Create Password Policy.
7. Provide a description for the policy (optional), and set the following parameters:
   • Check Allow use for Secrets Safe to allow the policy to be available for selection within team password credentials. The policy can be selected when a credential is using the Auto Generate option for setting the credential's password.
   • Use the - and + buttons to incrementally lower or raise the Minimum length and Maximum length of passwords for the selected policy. You can also manually enter the numbers in the text fields. Valid entries are 4 - 255 characters.
   • Select the First Character Value.
   • Uppercase Characters: Use the toggle button to permit or deny the use of uppercase characters in passwords. If uppercase characters are permitted:
     • Set the Minimum number of required uppercase characters using the - and + buttons or by entering a number in the text field.
     • Enter permissible characters in the Allow only the following uppercase characters field.
   • Lowercase Characters: Use the toggle button to permit or deny the use of lowercase characters in passwords. If lowercase characters are permitted:
     • Set the Minimum number of required lowercase characters using the - and + buttons or by entering a number in the text field.
     • Enter permissible characters in the Allow only the following lowercase characters field.
   • Numeric Characters: Use the toggle button to permit or deny the use of numeric characters in passwords. If numeric characters are permitted:
     • Set the Minimum number of required numeric characters using the - and + buttons or by entering a number in the text field.
     • Enter permissible characters in the Allow only the following numeric characters field.
   • Non-Alphanumeric Characters: Use the toggle button to permit or deny the use of non-alphanumeric characters in passwords. If non-alphanumeric characters are permitted:
     • Set the Minimum number of required non-alphanumeric characters using the - and + buttons or by entering a number in the text field.
     • Enter permissible characters in the Allow only the following non-alphanumeric characters field.
8. Click Update Password Policy.