Password and credential requirements for DotlyMaps systems.
Passwords must be at least 12 characters for standard accounts and 14 characters for administrative accounts.
Passwords must include a mix of uppercase, lowercase, numbers, and symbols where technically feasible.
Use of approved password managers is encouraged. Passwords must not be shared or written in unsecured locations.
MFA is required where supported for privileged accounts and strongly recommended for all users.
Passwords are stored using strong one-way hashing algorithms. Plaintext passwords are never stored or transmitted.
Password rotation is required upon suspected compromise. Routine rotation is recommended when MFA is not enabled.