Company
Password
Policy
This password policy outlines
the requirements for
Introduction creating and managing
passwords for all company
systems and applications.
The goal of this policy is to
enhance the security of
company data and systems
by preventing unauthorized
access.
Password Requirements
Most contain Passwords cannot be
based on personal
uppercase letters, Passwords must be
Minimum length 12 information (e.g., name,
lowercase letters, unique for each
characters birthdate, social
numbers, and special security number) or
account.
characters. dictionary words.
After three (3) failed
User password Users cannot reuse Passwords must be login attempts, the
can’t be share with passwords after the changed every 80 account will be locked
period of 90days. days. for a period of one
a third party
week.
Password Management
Password storage Passwords must be stored securely using strong encryption.
The company will provide secure methods for password recovery, such as
Password recovery
email or security questions.
The company will provide password manager tools to help users manage
Password manager
their passwords securely.
Employee Responsibilities
1 2 3
Employees are Employees must keep Employees should
responsible for their passwords avoid writing down
creating and managing confidential and avoid passwords or storing
their passwords in sharing them with them in easily
accordance with this others. accessible locations.
policy.
4
Employees must comply with password expiration and change requirements.
Company Responsibilities
1 2 3
The company will The company will The company will
communicate this enforce password implement
password policy to requirements measures to protect
all employees. through technical stored passwords.
controls and user
education.
Additional
Considerations
Password strength meters: The
company may implement password
strength meters to help users create
strong passwords.
Password reuse prevention: The
company may use password reuse
prevention tools to identify and block
reused passwords.
Multi-factor authentication (MFA): The
company may require MFA for
additional security.
Compliance
By adhering to this
password policy, employees
and the company can
significantly reduce the risk
of unauthorized access and
data breaches.
Thank you!
