Password Policy

Password Policy

The password policy applies three levels of complexity to different user groups within the school:

• LOW (Prep – Year 2)

Minimum of 4 characters: At least 2 letters and 2 numbers.

• MEDIUM (Years 3 – 6):

Minimum of 6 characters: At least 1 upper-case letter 1 lower-case letter 1 number or a special character.

• HIGH (Years 7 – 12, staff and parents):

Minimum of 8 characters: At least 1 upper-case letter, 1 lower-case letter 1 number, 1 special character.

Notes:

• The password cannot contain the user's complete first name or surname.
• The password cannot be the same as the last 3 passwords.
• All HIGH complexity passwords expire every 180 days by default.
• All LOW and MEDIUM complexity passwords expire every 365 days by default. The ePortal Admin has some control over password complexity and expiry dates. See the ePortal Admin ICON Passwords page for more detail.

All ICON users receive an email password expiry reminder 15 days before their password expires. If you do not have an email address attached to your account, the email is sent to the ICON ePortal Administrator.

If the password has not been changed one day before expiry, another reminder email is sent. If you still fail to change your password, you will be forced to change it on your next login.

The password policy is applied when you change your current password.