Create secure passwords

As a server administrator, you can control how complex user passwords need to be in IXM One. This ensures that users create secure passwords that meet your organization’s security standards.

Prerequisites

Consider the following prerequisites for creating secure passwords:

You must be a server administrator.
You must have access to the database.
Regular expressions are a powerful but complex tool. We recommend that only server administrators with prior experience use them.

How does it work?

A secure password is defined by two key components: the password rules and invalid entries.

Password rules

The password structure is defined by the regular expression PasswordRegEx. This regular expression specifies the rules that passwords must follow, for example, requiring uppercase letters, numbers, or special characters.

Example

passwordRegEx = ^(?=.*[A-Z])(?=.*[a-z])(?=.*\d)(?=.*[@$!%*?&])[A-Za-z\d@$!%*?&]{8,}$

This example species the following rules:

The password must be at least 8 characters long.
The password must include at least one uppercase letter.
The password must include at least one lowercase letter.
The password must include at least one number.
The password must include at least one special character.

Note
You can adjust the expression to match your security requirements.

Invalid entries

Optionally, invalid entries can be specified using the regular expression PasswordRegExInvalidOnMatch. This expression specifies which entries are not allowed for a password, such as a particular username or certain words.

Example

passwordRegExInvalidOnMatch = ^(%USERNAME%|%CUSTOMERNAME%)$

This example specifies the following rules:

The password must not be the same as the username or customer name.

Note
You can adjust the expression to match your security requirements.

Check regular expressions

Consider the following information when working with regular expressions:

You can use the following tool to explain regular expressions and check their syntax: https://regex101.com/
If you use this tool, ensure to set the flavor to C#.
In addition, AI tools can help you explain and create regular expressions.

Change IXM One password rules

When you create a new customer in IXM One, the default password settings are automatically copied to the datCustomers table.

If you want to change the password rules for a customer, you must do this directly in the database.

To change the default password rules, perform the following steps:

Open the database that contains the IXM One customer data.
Locate the datCustomers table.
Find the customer you want to update.
Edit the following settings:
- PasswordRegEx: Specify the required password structure.
- PasswordRegExInvalidOnMatch: Optionally, specify which entries are invalid.
Save your changes.

Note
The regular expression in the database must be HTML-encoded.

Customize the tooltip

When users enter a new password that doesn’t meet the password rules, there’s a tooltip informing them of the password rules.

To learn how to specify the tooltip text and add translations, click here.