Password requirements: protecting your data

Marcos Bastidas -

The application is designed to meet all Health Authority regulations for security and privacy measures. To this end, the application has stringent password requirements such as:

  • Lockout on excessive login attempts: Your account will lock after 10 failed attempts at logging in
  • Inactivity timeout: You will be automatically logged out after 15 minutes of inactivity
  • Password complexity: Your password must be at least eight characters long, must contain at least 3 of the 4 following character categories (Uppercase letter, Lowercase letter, Number, Special Character), must be different than your last four passwords, must not contain your username or any part of it
  • Password auto-expiration: Your password will expire every 60 days
  • Stale password auto-lockout: If an account remains inactive for 60 days, the password inactivates.
  • Password reuse frequency: You cannot re-use passwords you have used in the past 12 months 
  • Your last login display: Upon login, your date and time of your previous login is shown
  • Editing frequency: Passwords cannot be changed more than once every 5 days.

While these measures may be inconvenient for you as the user, they are considered the best practices for the protection of sensitive medical data. 

0 Comments

Article is closed for comments.