Security Settings

Configure password policies, session management, and authentication settings for your organization.

Password Policies

Set requirements for user passwords across your organization:

Setting	Description
Minimum Length	Minimum number of characters required
Require Uppercase	At least one uppercase letter
Require Lowercase	At least one lowercase letter
Require Numbers	At least one numeric digit
Require Special Characters	At least one special character (!@#$%^&*)
Password Expiry	Number of days before users must change their password (0 = never expires)

Session Settings

Setting	Description
Session Timeout	How long a session stays active without activity
Max Concurrent Sessions	Maximum number of simultaneous login sessions per user

Authentication Methods

Setting	Description
Email/Password Login	Standard login with email and password (always enabled)
Institutional ID Login	Allow students to log in with their institutional ID
Google OAuth	Enable "Sign in with Google" on the login page

Two-Factor Authentication (2FA)

If available on your plan:

• Enable 2FA - Require users to verify with a second factor
• Enforcement - Optional (users can enable themselves) or Required (all users must set up 2FA)

Tips

• Set a minimum password length of 8 characters with mixed requirements for good security
• Enable password expiry (e.g., 90 days) for organizations handling sensitive data
• Google OAuth simplifies login for users who already have Google accounts
• Session timeout of 2 hours balances security and convenience for exam-taking