While you can manually add the technicians' passwords in MobileTech Admin (see Add a MobileTech User) or in Resco's Admin Console (see Set Technician Passwords with Admin Console (optional)), you can use the Update Password Policy window to set up the complexity, password expiration, as well as the lockout mode. In MobileTech Admin, select Tools > Update Password Policy. The password complexity goes into effect when at the time of the password expiration. The password expiration applies only to MobileTech Users, not to MobileTech Administrators. If MobileTech Administrators update their password, the password complexity is enforced.

If you've previously set up password complexity and lockout policy using Regex, those values will default into this window. 

Setting Password Complexity and Expiration

A password complexity policy is designed to deter brute force attacks by increasing the number of possible passwords. To protect your organization from brute force password hacking, enforce the use of strong passwords such as requiring digits, upper case letters, special characters, and password length. When the technician passwords expire, a prompt is displayed when the technician attempts to sync or sign in to their device and they can update the password at that time. 

1. In MobileTech Admin, go to Tools > Update Password Policy. If you have an existing password policy set up, the checkboxes with be automatically marked.
2. Choose from the following complexity options by marking the applicable check box(es).
   • Require at least one number. 0-9
   • Require at least one upper case letter. A-Z
   • Require at least one special character. (?=.*[^0-9A-Za-z])
3. Set the Minimum password length. This setting determines the least number of characters that can make up a user account. If set to 0, a password can be any number of characters.
4. Select the Password Expiration In value.
   • Never
   • Next Logon
   • 30 Days
   • 90 Days
   • 180 Days
   • 1 Year
5. Set up the lockout mode below.

Setting Lockout Mode

 Set up your password lockout policy to indicate how many x failed login attempts, as well as how many minutes a user's account is locked. 

1. Enter the Lockout Attempts value. This threshold number indicates how many unsuccessful logins a user can attempt before their account is locked. The default value is 3 attempts.
2. Enter the Lockout Duration (in minutes) value. This number indicates how long the user's account is locked before they can try to log in. You can also manually unlock a user's account from the MobileTech Admin Users window by selecting the user and then selecting the Unlock button. The default value is 10 minutes.
3. Select Update.