Security Policy

Enforcing company-wide security policies prevents unauthorized access, and aligns your deduplication project with internal compliance standards.

All security rules apply company-wide to every user in your organization. By default, minimum password length is set to 12 characters, password expiration is set to Never, and 2FA is optional unless enforced by an admin.

Recommendations for Account Security Enhancement

• Enforce 2FA for all users: Implement two-factor authentication (2FA) across your organization to add an extra layer of security to account logins.
• Enable Password Expiration: Ensure passwords expire periodically to mitigate the risk of unauthorized access.
• Keep Password Expiration at 90 days or less: Set a policy where passwords must be changed every 90 days or less to maintain continuous security.
• Increase Minimum Password Length to 15: Require users to create passwords of at least 15 characters to improve password strength.
• Enable Close Sessions When Inactive: Automatically log out inactive users to prevent unauthorized access in case of prolonged inactivity.

Security Policy Configurations

Use these settings to customize your account security, password requirements, and access controls:

Passwords and Authentication

• Minimum Password Length: Require a minimum password length.
• Passwords Expire After: Set passwords to expire every 30, 60, 90, 180 days, or Never.
• Password Reuse Prevention: Check this box to prevent users from reusing a specified number of past passwords.
• Enforce 2FA: Require two-factor authentication for account logins.

Inactive Sessions

• Close Sessions When Inactive: Automatically log out users after a specified period of inactivity to prevent unauthorized access on unattended screens.

IP Whitelist

• Whitelist IPs: Restrict workspace login access to specific static IP addresses.

Related articles: Company Settings, Users, and Audit Log.