Feature Requests
Share ideas, discuss and vote on requests from other users in community
 

Prohibit password reuse for admin users

alephlg shared this idea 3 months ago
Under Consideration

The PCI DSS SAQ contains the question below:

8.2.5.aMust an individual submit a new password/passphrase that is different from any of the last four passwords/passphrases he or she has used?

Please implement this for admin users. It would be great for clients too.

Comments (1)

photo
1

This should be done for both administrators and normal users, as well as a password enforcement policy... IE: If your password is older than X days, you must change it.