By default, we enforce a complex password standard that requires each user’s password to be at least 8 characters in length, include at least one number, and one symbol, and no common phrases. In addition, by default, all user passwords will expire after 45 days and require a new password (that user can’t use the same password until at least 5 new passwords have been used). We can also customize these requirements to fit your company’s security policy if necessary.