Password Policy FAQs

Are IDs locked out when a user types the wrong password multiple times?

Yes, five failed login attempts will result in a 10-minute lockout for the account. This applies if you are using an Umbrella login. If you have SSO configured, the SSO provider sets these limits.

Do users need to change passwords periodically?

No, there is no requirement for users to change their passwords periodically.

Does the system restrict users' access to a certain region or country (United States)?

No, the system does not restrict user access based on geographical location.

Does the system analyze user behavior and block access (or require additional authentication) when suspicious behavior is detected?

No, the system only locks the account after five failed login attempts.

Are user accounts disabled automatically after they are not used for a period of time? How long before they are disabled?

No, user accounts are not disabled due to inactivity.

---

Contact Umbrella Support > Password Policy FAQs>Get Started