Build a printable password policy.

PASSWORD POLICY

Organization: Your Company Name
Business Size: 11–50 employees
Compliance Context: None / general
Effective Date: 6/28/2026

1. PURPOSE
This policy establishes minimum standards for the creation, use, and protection of passwords used to access Your Company Name systems and data.

2. SCOPE
This policy applies to all employees, contractors, vendors, and third parties with access to Your Company Name information systems.

3. PASSWORD CONSTRUCTION
- Minimum length: 14 characters
- Must include a mix of upper- and lowercase letters, numbers, and at least one symbol
- Must not contain the user's name, username, or company name
- Must not match any password previously used on the account
- Passphrases (4+ unrelated words) are encouraged

4. MULTI-FACTOR AUTHENTICATION
Multi-factor authentication (MFA) is REQUIRED on all email accounts, remote access, VPN, cloud services, and any administrative account. Phishing-resistant MFA (FIDO2 / hardware key) is required for privileged accounts.

5. PASSWORD ROTATION
Routine periodic rotation is NOT required (aligned with NIST SP 800-63B). Passwords must be changed immediately upon suspicion of compromise, after an employee separation, or when shared inadvertently.

6. ACCOUNT LOCKOUT
After 5 consecutive failed login attempts, the account will be locked. Locked accounts may only be unlocked by IT after identity verification.

7. PASSWORD STORAGE
- Passwords must never be written down in plain text in unsecured locations.
- An approved password manager is required for storing credentials.
- Passwords must never be shared by email, SMS, or chat.

8. INCIDENT REPORTING
Any suspected password compromise must be reported to IT or the security coordinator within 1 business hour.

9. ENFORCEMENT
Violations of this policy may result in disciplinary action up to and including termination.

10. REVIEW
This policy is reviewed annually by the designated security coordinator.

— Generated by Wolf Tech IT Solutions Password Policy Generator
   https://wolftechitsolutions.com/tools/password-policy-generator