---
title: "Password Rules"
slug: "password-rules"
updated: 2026-07-20T19:06:56Z
published: 2026-07-20T19:06:56Z
canonical: "help.idibilling.com/password-rules"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.idibilling.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Password Rules

On the Password Rules window, a zero (0) value in any of the number fields indicates the option is disabled.

![UG template for Help](https://cdn.us.document360.io/3f7f8ade-bcb1-4ec8-af25-0c0ad8601afb/Images/Documentation/19272.bmp?sv=2026-02-06&spr=https&st=2026-11-14T10%3A57%3A37Z&se=2026-11-14T11%3A57%3A37Z&sr=c&sp=r&sig=gK5d4j%2BpLPATBGKr6lmMUZ3YDidvwnyOvQmuywzoKUo%3D)

Field Definitions

| Enforce Strong Passwords | Checked: Force upper and lower case and alphanumeric passwords. Unchecked: Upper and lower case and/or alphanumeric passwords are not forced. Must be checked for PCI Compliance. |
| --- | --- |
| Lockout Reset Minutes | Number of minutes the system must wait before it automatically unlocks a user that was previously locked out of the system due to surpassing the allowed number of login attempts per the login settings table. Minimum requirement for PCI Compliance: 30 minutes. |
| Minimum Days Between Password Change | Number of days until a user can change their password. For a value of 10, the user cannot modify their password until 9 days after it was entered. |
| Minimum Password Length | Minimum number of characters for the password. Minimum requirement for PCI Compliance: 7 characters. |
| Password Expiration Days | Number of days the password remains valid. Minimum requirement for PCI Compliance: 90 days. |
| Password Expiration Warning Days | Number of days to display a window that warns the user how many days until their password expires. |
| Remember Last N Passwords | Number of times previous passwords are remembered in the system. This prohibits reuse. Minimum requirement for PCI Compliance: 4. |
| Retry Reset Minutes | Number of minutes that must elapse between login attempts before the system resets the number of retries back to zero. |