Password Policy

Owned by Jagoda Brie
Last updated: Oct 17, 2023 by Matthew Abregana
1 min read

As a result of a Penetration Test performed on our software, we have implemented changes to our password policy, that aim to better protect companies' and users' data.

 

A Penetration Test

A Penetration Test is a security exercise where a cyber-security expert attempts to find and exploit vulnerabilities in software. One of the findings in our last test was that the Air Maestro password policy was insufficient.

 

Changes to Password Policy

  1. Extending minimum password length to 14 characters

  2. Inability to use common words was well as names including your own name and your company’s name, email, date of birth, and Air Maestro username.

  3. When the regular password change requirement is enabled, the user won’t be able to use their previous eight passwords. The old passwords will be encrypted as well.

Recommendations for users

Longer and stronger passwords are significantly harder to break, however we understand the added complexity and length can make it more difficult to come up with a password that will be memorable.

We recommend considering passphrases - strong type of password that has four or more random words, or a short sentence that means something to a user.

We discourage writing the passwords down and disclosing them to colleagues.

If you forget the password - please contact us at helpdesk@airmaestro.net for assistance.

 

https://avinet.atlassian.net/wiki/spaces/AMKB/pages/1664417807