salesforce_security_impl_guide

CHAPTER 3
Configuring Salesforce Security Features
Review the following sections for detailed instructions and tips on setting up and configuring Salesforce security features.
Setting Password Policies
For your organization’s security, you can set various password and login policies.
Note: User passwords cannot exceed 16,000 bytes.
Logins are limited to 3,600 per hour per user. This limit applies to organizations created after
Summer ’08.
1. From Setup, click Security Controls > Password Policies.
2. Customize the password settings.
Field
User passwords expire in
Enforce password history
Description
The length of time until all user passwords
expire and must be changed. Users with the
“Password Never Expires” permission are not
affected by this setting. The default is 90
days . This setting is not available for
Self-Service portals.
Save users’ previous passwords so that they
must always reset their password to a new,
unique password. Password history is not
saved until you set this value. The default is 3
passwords remembered . You cannot
select No passwords remembered
unless you select Never expires for the
User passwords expire in field.
This setting is not available for Self-Service
portals.
EDITIONS
Available in:
• Contact Manager
• Group
• Professional
• Enterprise
• Performance
• Unlimited
• Developer
• Database.com
USER PERMISSIONS
To set password policies:
• “Manage Password
Policies”
Minimum password length
The minimum number of characters required
for a password. When you set this value,
existing users aren’t affected until the next
time they change their passwords. The default
is 8 characters .
78