In this article I will discuss security enhancement to protect both your data and applications in Summer’14 release, Mainly I will focus on password related enhancements.
Additional Password History Options: Remember Up to 24 Passwords
Minimize password reuse by selecting up to 24 passwords to be remembered in the organization history. Previously, administrators could limit user password reuse by selecting an option of up to 15 passwords remembered in an organization’s history. After Summer’14 release administrators can select up to 24 passwords remembered. (The default remains 3 passwords remembered.) This option further reduces password reuse and can better protect organizations from improper access. To reset the password history option follow the below instructions
1) Click on Name | Setup | Administration Setup | Security Controls | Password Policies
2) Navigate to Password Policies section and select a value for Enforce password history drop-down as shown in the below screenshot
Enforce password history
Uppercase and Lowercase Password Complexity Option
Increase organization security by requiring both uppercase and lowercase letters in passwords. Administrators can require that passwords contain alpha, numeric, and special characters. After Summer’14 release administrators can also select option that require passwords include both uppercase and lowercase letters. More complex passwords improve organizational security. To set the password complexity requirements for your organization follow the below instructions
1) Click on Name | Setup | Administration Setup | Security Controls | Password Policies
2) Navigate to Password Policies section and select a value for Password complexity requirement drop-down as shown in the below screenshot
Password complexity requirement
Longer Minimum Password Length Option
Make password hard to hack by requiring a minimum password length of up to 12 characters. Administrators could previously require minimum password lengths of up to 10 characters but after Summer’14 release administrators can also select option that require a 12 characters minimum length. (The default remains 8 characters.) A longer password presents more possible password combinations and helps protect an organization from improper access. To set the minimum password length for your organization follow the below instructions
1) Click on Name | Setup | Administration Setup | Security Controls | Password Policies
2) Navigate to Password Policies section and select a value for Minimum password length drop-down as shown in the below screenshot
Minimum password length
Minimum Password Lifetime Option
Require a minimum assword lifetime to prevent multiple resets in short periods of time. Previously administrators could require a maximum lifetime for a password, such as 90 days. After Summer’14 release administrators can select option that require password lifetimes be a minimum of 01 day. If this option is selected, passwords can’t be reset more than once during the minimum lifetime. To set the minimum password lifetime option for your organization follow the below instructions
1) Click on Name | Setup | Administration Setup | Security Controls | Password Policies
2) Navigate to Password Policies section and select Require a minimum 1 day password lifetime check-box as shown in the below screenshot
Require a minimum 1 day password lifetime
The HTML release notes for Summer’14 are available now. Here is the link http://goo.gl/4BDDdQ
