Password Complexity Rules

The password complexity rules for accounts at Northeast are as follows:

1. Limit repeated access attempts by locking out the user ID after not more than six attempts.  
2. Set the lockout duration to a minimum of 30 minutes or until an administrator enables the user ID.  
3. Passwords/passphrases must meet the following:  
   1. Require a minimum length of at least 12 characters
   2. Password must contain at least one uppercase letter (A-Z), one lowercase letter (a-z), one number (0-9), and one special character (~!@#$%^&*_-+=`|\(){}[]:;"'<>,.?/)
   3. Password cannot contain First Name, Last Name or Northeast username/email 
   4. Users will be required to update their passwords every 365 days  
   5. Cannot reuse your last 4 passwords