Password Policy

At Your Research, we are committed to ensuring the highest level of security for all our users. Our password policy is designed to protect your account and personal information from unauthorized access. Below are the key components of our password policy:

Password Requirements

To maintain a secure environment, all passwords must meet the following criteria:

• Length: Passwords must be at least 8 characters long.
• Complexity: Passwords must include a combination of letters (both uppercase and lowercase), at least one numeric digit, and at least one special character (e.g., !, @, #).
• Uniqueness: Passwords cannot contain any part of the account name.
• Security: Passwords must avoid simple character strings or sequences such as "abc" or "123".

Enforcing Password Changes

In situations where there is a potential security risk, our system allows administrators to enforce a password change for a patient. This feature ensures that if an account's security is compromised, the user will be required to set a new password upon their next login. This proactive measure is critical in safeguarding patient data and preventing unauthorized access.

Secure Storage and Encryption

We take password security seriously. All passwords in our system are stored in an encrypted format and hashed using the Rfc2898 standard with a random salt. This approach provides an additional layer of protection, ensuring that passwords are secure against potential attacks.

Account Lockout Mechanism

To further protect against unauthorized access, our system implements an account lockout mechanism. If an incorrect password is entered three times in a row, the account will be temporarily locked for 300 seconds. This delay helps prevent brute-force attacks and contributes to the overall security of the system.

Our password policy is an integral part of our commitment to maintaining the security and confidentiality of all user data. If you have any questions or need further assistance, please do not hesitate to contact our support team.