Password requirements enforcement
Last updated
Last updated
🚨 Prerequisite: Multi-Factor authentication (MFA)
This document defines the password requirements enforced to protect OXU Accounts during sign-up, password creation, and password updates.
This guide explains:
What password rules are required
Why these requirements exist
How to create a strong and secure password
Before creating or updating a password:
You must be signing up with email and password, or
You are setting or updating a password after account creation
To help protect your account, your password must meet all of the following requirements:
Password validation is performed in real time and must pass before continuing.
Using a strong password helps to:
Password requirements are enforced during:
Additional security rules:
Be at least 8 characters long
Include at least one uppercase letter (A–Z)
Include at least one lowercase letter (a–z)
Include at least one number (0–9)
Include at least one special character
(for example: ! @ # $ % ^ & *)
Prevent unauthorized access to your account
Reduce the risk of brute-force attacks
Protect against credential-stuffing attacks
Keep your personal information secure
Secure@123
MyPassw0rd!
Login#2024
password
(Missing uppercase letter, number, and special character)
Password
(Missing number and special character)
Pass1234
(Missing special character)
Ab@1
(Too short)
Avoid using personal information such as your name or email address
Do not reuse passwords from other websites
Consider using a password manager to generate and store strong passwords securely
Sign up with Email and Password
Password creation after Google sign-up
Password reset (Forgot Password)
Password change from Account Settings
Passwords are case-sensitive
Passwords are never stored in plain text
Secure hashing algorithms are used for password storage
You can change your password at any time from Account Settings
If you forget your password, use the Forgot Password option to reset it
Business accounts may apply stricter password policies
Strong password rules protect user accounts
Requirements are enforced consistently across all flows
Real-time validation improves usability and security
Secure storage ensures passwords remain protected