Master Admins can configure and update password settings including the password expiration policy and password reuse policy. Admin users can see the configured settings while the settings aren't visible to nonadmin users.
Changes to password settings affect all the regions in the account. Therefore, any Master Admin can make changes, no matter what region they're the Master Admin of. We recommend having a single Master Admin user across all regions in the account.
- Click the Security icon to open the Security Page.
- Scroll down to the Authentication Method section.
- Click Edit in the In the Authentication Method card. The Password settings will appear on the right of the screen.
- In the Password expiration drop-down, select how often users must change their passwords: never, every month, every three months, every six months, or once a year.
- In the Number of previous passwords to deny drop-down menu, select how many previous passwords a new password is compared against. The previous passwords must be different from: no previous password, three passwords, five passwords, or 10 passwords.
- To turn on MFA select Enable Multi Factor Authentication. The next time your users log in to the account, they'll be prompted to enroll in an authentication method.
- Click Save.
In the Password Settings page you can also enable Multi Factor Authentication.