What are the password requirements of Laposta?
You always set your own password, whether you are creating an account or receiving your own login name within an existing account. A password belongs to a single login, not to an entire account: every user has their own login with their own password. What that user is allowed to do within the account is determined separately using roles and permissions.
Length is more important here than variation: a long password is more secure than a short password with different characters. For example, the password ‘cheese book tree bike’ is stronger than ‘P@ssword123’.
When creating a password, Laposta immediately displays a message if the password resembles a commonly used password, if it is too short (even with uppercase letters, such a password is no more secure), or if it would be more secure by adding more words to it.
You can always reset your password yourself, whether you have forgotten it or simply want to replace it. You can read how to do this under Forgotten password.
Laposta does not require you to periodically set a new password. Such a requirement has disadvantages: users often choose weaker passwords in which they reuse patterns, write down their password and become frustrated.
Adding extra security to your login with two-step verification
Multi-factor authentication (also known as two-step verification, two-factor authentication or 2FA) is a better security measure than being required to periodically set a new password. Every user can set up 2FA themselves, and organisations can make 2FA mandatory for all their users in an account. Read how to activate 2FA in your account.
If you have a paid account, you can also have another custom authentication method set up: Single Sign-On (SSO).