Password policies help protect your Tribe CRM environment by reducing the risk of unauthorised access. They allow you to define clear rules for how passwords are created, used, and renewed across your organisation. You might review or update these settings to meet internal security requirements or compliance standards. By following this guide, you will understand how password policies work in Tribe and how they affect users.
Table of Contents
What Does The Password Policy Do?
How Do You Adjust The Password Policy Settings?
What Do Users Experience When A Password Policy Is Active?
What Happens If A User Accesses Multiple Environments?
Which Password Settings And Ranges Are Available?
What Does The Password Policy Do?
The password policy in Tribe CRM defines the rules that passwords must meet for all users in an environment. These rules control password length, complexity, reuse, and expiry. By setting a clear policy, we help you maintain consistent security standards across your organisation.
How Do You Adjust The Password Policy Settings?
Only administrators can change password policy settings.
Click Configuration.
Select Security Settings.
Review the existing password policy settings.
Adjust the values to match your organisation’s password policy.
The updated settings apply immediately to all users within the environment.
Note: Password policies apply to every user in the environment and cannot be customised per individual user.
What Do Users Experience When A Password Policy Is Active?
By default, passwords expire after one year. Administrators can shorten this period, but cannot extend it beyond one year.
When a password expires:
The user is notified during login.
An email is sent with a link to set a new password.
The new password is checked against the active password policy.
Users can also reset their password at any time from the Tribe CRM login page. After a reset, the new password remains valid for up to one year, depending on the policy.
What Happens If A User Accesses Multiple Environments?
If a user has access to more than one Tribe CRM environment, the strictest password policy applies.
For example, if one environment requires a minimum password length of 8 characters and another requires 15 characters, the user must create a password that meets the 15-character requirement. This ensures consistent security across all environments the user can access.
Which Password Settings And Ranges Are Available?
The following settings can be configured within the password policy, each with defined limits:
Minimum Length: 8 to 500 characters
Minimum Lower-Case Letters: 1 to 50
Minimum Uppercase Letters: 1 to 50
Minimum Digits: 1 to 50
Minimum Symbols: 1 to 50
Maximum Sequences: 3 to 10
Maximum Repeating Characters: 3 to 10
Maximum Age (Days): 30 to 365
Password History: 1 to 25 previous passwords
These ranges help balance security requirements with practical usability.
Quick Summary
Password policies in Tribe CRM define how secure user passwords must be and how often they expire. Administrators manage these settings centrally through the security configuration. Users are guided through password updates automatically when their password no longer meets the active policy.