A Practical Guide to Managing Your Account Passwords

Implementing a password policy for Aztec Back of House is best practice, ensuring user accounts are managed with recommended security settings. It's also best practice for every user to have their own individual login rather than sharing credentials. Aztec lets you configure a range of policy options, so you can enforce strong password controls tailored to your organisation.

Setting the Password Policy

The password policy defines all the settings that apply to your organisation, including which options are required when users set up or manage their login details. This covers things like minimum password length, complexity requirements, expiry periods, and how many previous passwords the system remembers to stop people reusing old ones. Getting these settings right means your system is protected without making the login process unnecessarily difficult for users.

Navigate to Staff & Security → Configuration → Password Policy

The following table outlines each setting and its corresponding functionality.

Setting	Description	Additional Information
Minimum Password Length	The minimum length of passwords	6 - 20 characters can be configured
Maximum Password Length	The maximum length of passwords	6 - 20 characters can be configured
Password Expiry Days	Number of days before the password expires	If the password expiry is set to 0 they will not expire
Password Notification Days	The number of days the user will be prompted that their password will expire	Password expiry days has to be greater than 0 to enable this setting with a minimum of 1 day and a maximum of 14 days It is not possible to set the Password expiry notification to be greater than or equal to the Password Expiry period It is not possible to set the Password expiry period to be less than or equal to the Password Expiry notification To prevent having to change your password on the same day as when it was last changed, it is not possible to set Password expiry to 1 day
Special Characters Required	When enabled special characters will be required in passwords	The following characters can be used: !"#$%&'()*+,-./:;<=>?@[\]^_`{\|}~ If this setting is not enabled special characters can still be used
Password Reuse	When enabled the password reset setting in conjunction with the number of password changes determines how many passwords must be used before the user can then reuse the password again
Number of Password Changes	When password reuse is enabled this will default to 24 meaning the previous 24 passwords associated to that user cannot be used again
Forgotten Password Hint	Hint text can be displayed prompting a user what they would need to do in the event that they have forgotten their password

Recommendation

When creating new back of house users Zonal recommends to always ensure you keep the 'Change password at next logon' selected allowing you to set a default password and then the user can changes this to a password of their choosing, meeting the policy guidelines