The Authentication page lets your company configure password expiration, account lockout and password history, so that access to Diffly matches your security requirements.
Who can use it?
Only users with Admin access can view and change this page. The rules you set apply to your whole company.
What you can configure
Require a periodic password change : when this option is on, users must set a new password after the configured number of days.
Lock accounts after failed login attempts : when this option is on, accounts are temporarily locked after too many failed login attempts over a given period.
Prevent reuse of recent passwords : in the Number of recent passwords field, set how many previous passwords cannot be reused.
ℹ️ Good to know: these options are off by default; turn them on to match your company's security policy.
How it works
Go to Settings → Authentication, turn on the options you need and enter how many passwords to keep in the history, then click Save (or Cancel to discard your changes).
Best practices
Align these settings with your organization's existing security policy.
Let your users know before you turn on periodic password change, so a change doesn't lock them out unexpectedly.
Review these options periodically to keep them in line with your requirements.