A password policy can be created in Fotoware to ensure that all users have passwords of a certain complexity to aid security.
The password policy applies:
- When users sign up for a Fotoware account online.
- When users change their existing password.
- When users have forgotten their password and choose to reset it.
The password policy applies only to passwords set by the users themselves when signing up or changing or resetting their password.
Creating a password policy
From the Tools menu (cogwheel icon), go to Site Configuration > Security > Login and sessions. The password policy settings are in the Passwords section.
Select Enforce password policy and enter a regular expression (external link, Wikipedia) to control the password complexity. The Validation help text field can be used to inform users in plain text about the password requirements.
Allowing users to reset their password
Users can request a password reset by turning on the Enable "Forgot Password?" toggle if they forget their passwords. Note that this will not be possible when using an external identity provider such as Microsoft Entra ID - in that case, the password needs to be reset directly with the identity provider.