Statement of Requirements

• Does not contain the user's account name or parts of the user's full name that exceed two consecutive characters
• Be at least ten characters in length
• Contain characters from three of the following four categories:
  • English uppercase characters (A through Z)
  • English lowercase characters (a through z)
  • Base 10 digits (0 through 9)
  • Non-alphabetic characters (for example, !, $, #, %)
• Must be changed every 180 days.
• The previous password may not be reused for 175 days.
• Passwords cannot be changed for 3 days after creation

Long password exceptions

• Users with a password of 20 characters or greater will be exempt from the password expiration schedule. 

Note: Police are still required to change their passwords every 365 days, per the latest CJIS policy.