Note: The features in this article are currently only available to customers on our Enterprise plan.
Introduction to additional account security features
By default, user accounts on our platform are secured via regular email + password login combinations. Optionally, every individual user can enable 2 factor authentication on their own account.
We have additional configuration options if you need to enforce more fine-grained security policies for user accounts on our platform. We currently offer:
- Enforcing a custom password policy/format
- Account lockout after a number of failed password attempts
- Enforcing 2-factor-authentication for all users in your company
The rest of this article describes how to enable or configure our supported additional account security features.
Enforcing a custom password policy/format
You can configure the password format requirement of all user accounts in your organization on Firmhouse. Currently we support customizing the following format components:
- A minimum password length
- The minimum amount of lowercase characters
- The minimum amount of uppercase characters
- The minimum amount of numbers
To configure any of these components, use the "Edit" screen of your Organization configuration on Firmhouse:
Account lockout after a number of failed login attempts
You can configure to automatically lock out accounts by setting the "Max login attempts" in your organization's settings:
After someone fails to log in for this many attempts, their account will be locked. If their account is locked they will need to reset their password before they can access their account again.
Enforcing 2-factor-authentication for all users on your custom deployment
If you are an Enterprise customer with a custom deployment of the Firmhouse platform, we can configure your custom deployment so that all users are required to set up and log in via 2-factor-authentication before they can start using their account.
Please get in touch via firstname.lastname@example.org or your account manager if you would like to have this feature enabled.