Configure MFA, password policies, and session timeouts
Security settings give administrators control over authentication, password policies, and session behavior. All configuration lives under Security Settings.
Authentication & Security covers three areas—MFA, Password, and Timeout Settings. Each area groups related controls that you can configure independently.
MFA
Password
Timeout Settings
Multi-factor authentication (MFA) adds a second layer of verification beyond a password. You can choose whether to enforce MFA for your organization and configure how frequently users verify their identity.
The MFA tab controls enforcement and frequency options for multi-factor authentication
Users aren’t prompted for MFA again for 30 days on a recognized device.
Password settings let you define complexity requirements, configure lockout behavior after failed login attempts, and set additional password management rules.
The Password tab covers complexity levels, lockout settings, and password history configuration
Passwords must be at least 8 characters and include 1 digit, 1 uppercase letter, 1 lowercase letter, and 1 special character. KODE also rejects commonly used passwords.
Passwords must be at least 12 characters and include 1 digit, 1 uppercase letter, 1 lowercase letter, and 1 special character. High complexity also disallows consecutive characters.
Define your own complexity rules to match your organization’s security policies. Custom rules can include lowercase requirements and non-consecutive character rules.
