From 2506baef8e6d60a8a9a9fc8fd176213a779842d4 Mon Sep 17 00:00:00 2001 From: Mitch Gaffigan Date: Wed, 26 Aug 2026 17:53:57 -0500 Subject: [PATCH] Update default password policy to match 2026 nist minimums Signed-off-by: Mitch Gaffigan --- server/conf/mirth.properties | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/server/conf/mirth.properties b/server/conf/mirth.properties index cbc3a21cec..fdf96a8453 100644 --- a/server/conf/mirth.properties +++ b/server/conf/mirth.properties @@ -9,13 +9,13 @@ http.port = 8080 https.port = 8443 # password requirements -password.minlength = 0 +password.minlength = 15 password.minupper = 0 password.minlower = 0 password.minnumeric = 0 password.minspecial = 0 -password.retrylimit = 0 -password.lockoutperiod = 0 +password.retrylimit = 100 +password.lockoutperiod = 1 password.expiration = 0 password.graceperiod = 0 password.reuseperiod = 0