FAQ: Password Policies

With JumpCloud's Password Policies, you can implement targeted security strategies by creating unique password policies for different user groups. This is a list of frequently asked asked questions related to Password Policies.

What is the new custom password policy?

This feature allows admins to create multiple, customized password policies. Instead of a single, organization-wide rule, you can now set different policies with tailored complexity, aging, reuse, and recovery settings to fit various user needs or security requirements. See Get Started: Password Policies to learn more.

Where can I create the new custom password policies?

A new Password Policies section is now available in the left navigation under Security Management, offering an enhanced experience for managing custom password policies. Admins can now tailor policies by user group, using a familiar configuration interface.

What happens to my existing password policy?

It will automatically become the default policy as you add your first custom password policy by user group.

Can I still have just one policy?

Yes, you can choose to only use and modify the default policy as you do it today. Go to Settings > Security > Password Settings. See Manage Password and Security Settings to learn more.

How are custom policies applied to users?

By associating them with user groups. You'll link specific user groups to the desired custom password policy.

When does the custom policy take effect?

Once the custom password policy is saved, the settings of the policy will take effect only when

• User resets the password
• Admin force resets the password
• An expiration Schedule is upcoming that warrants the password reset

Can multiple user groups be linked to one policy?

Yes, if they share the same password requirements.

What’s recommended for creating user groups?

It is recommended to create a group of users based on roles or departments or functions with distinct password security needs.

What if a user is in multiple groups with different policies?

The first best matching policy will be enforced based on the defined policy precedence.

What is policy precedence and how to manage it?

Policy Precedence is a setting where admins can order custom policies to determine which takes priority for users in multiple groups. There will be a setting to edit the policy precedence under the “Password Policies” section that will allow you to manually customize and set the order of policies. See Setting Policy Precedence to learn more.

When a user moves from the default policy to a new custom policy, are their password settings immediately updated?

When a user who was under the default policy is added to a new custom policy, once the custom policy is saved, the settings of the policy will take effect only when:

• User changes the password
• Admin force changes the password
• Expiration Schedule is underway

Until the above mentioned scenarios are enforced, the users continue to adhere to the default policy

How do I modify the default password policy?

This can be done in 2 ways.

• Login to the Jumpcloud admin portal.
  • Go to Security Management > Password Policies and click the default policy link. It will open a new browser tab where you can make changes and save.
• The other way would be to directly go to Settings > Security > Password Settings and make changes like you do today.

What happens if a user does not match any custom policy?

Users who are not part of any user group associated with a custom password policy are subject to the password settings of the Default Policy. It acts as a safety net, so no user in the org exists without a password policy requirement.