Compromised Password

Compromised Password

Cloudwork can control settings for compromised passwords to increase security for its users.
With the compromised password feature enabled, Cloudwork can detect and prompt the user to update a compromised password.
Different levels of forcing a user to update the compromised password can be set within the OU’s Cloudwork ID Settings. These settings can be applied to each Cloudwork OU.

Cloudwork will check the user's password against the dark web via HaveIBeenPwned's.facility. More information located here. The compromised dataset is up to date using HaveIBeenPwned's online anonymous API.

Located in side menu>Settings>Cloudwork ID Settings>Features

Settings related to Compromised Password

Compromise Password Login Check

Compromised Password Login Check has 3 options:

• Enable option for users to update compromised password at logins: Users are prompted to update their password, or they can skip password update to continue with logins
• Force users to update compromised passwords at logins: Users are prompted to update their password and must do so before being allowed to continue with login.
• Do not check for compromised password at logins: No check for compromised password and password update prompt.
  

Compromise Password Login Threshold

The number of days before enforcing users to update their passwords without allowing them to skip the password update.