Password Requirements

Agree!

I have just assigned 10 new users today - and what a struggle to get them on board! 

Hi Tori,

• · Minimum 8 characters
• · Include at list 1 uppercase characters
• · Include at list 1 lowercase characters
• · Include at list 1 alphanumeric characters
• · Include at list 1 numeric characters
• · Include at list 1 special characters (e.g. #, *, % etc) please see file.

What a lame set of password requirements - this should be something configurable on the company level - forcing symbols is always going to be a nightmare, especially for non-computer-savvy users, and from the sounds of things, symbols aren't even defined very clearly.

In addition, the "answer" didn't address the initial ticket, which stated that some of the characters, highlighted in the pdf attachment, do not, in fact, register as symbols.

Peter, 

It is clear you have strong feelings about this. Please understand that this was not done to complicate things for users but to meet security standards. As for the question not being answered, please let me know what questions remain, that the document does not answer and I would be happy to get you your answers directly from our Product team, especially if it is found that a character that "should" be supported here is not working (this may require a case for investigation). 

Thank you

The symbols '-' & '_' did not work for a few of my users back when I originally posted this question.  I have not had any other feedback since so I'm unsure this is still the case.

Hi Tori,

I apologize for the misinformation on my part. The symbol that works is "-" and not "_". Dash works as a symbol but not underscore as it is considered to be a character. So if you want to use "_" or underscore in your password, you would need to add a symbol to it. 

Can we have a definitive list of which symbols are acceptable?

I have users distributed worldwide and it seems that they select symbols on their keyboard which Clarizen does not recognise as a symbol.

I do not want to give them a list of just 4 symbols %,*,!, # which I know work. This goes against the principle of security if the pool of acceptable symbols is so small.