Jira (Data Center)- password policy.

[Anita Chen]

For Jira (Data Center), I find out that we can do the custom password settings. (e.g. password length, character variety and similarity checks)

However, is there any place to set following settings of password?

1. Password must be changed every 60 days.

2. Can't allow to enter password wrong for more than 5 times. If more than 5 times, account will be locked and can't log in until Jira admin approved.

3. Password history record can keep at least 5 records. 

[Fazila Ashraf · Accepted solution]

Hello @Anita Chen 

These password settings are not available in the out of the box JIRA but if use Atlassian crowd for access management, it can offer

• maximum number of invalid passwords attempts before the authenticating account will be disabled
• number of days until the password must be changed
• number of previous passwords to check when disallowing repeated passwords on password change

Check out https://www.atlassian.com/software/crowd

You can also look at apps like https://marketplace.atlassian.com/apps/1211254/advanced-password-policy-for-jira?tab=overview&hosting=datacenter

Hope it helps!

[Anita Chen]

Thank you for your reply. It's helpful! :)

[Fazila Ashraf]

Do note that there is built in captcha lock feature available..  Refer to https://confluence.atlassian.com/adminjiraserver073/configuring-jira-application-options-861253962.html on the settings