Order Management Release Notes – Enhanced Password Complexity Requirements

Announcement: 01/16/2025

Order Management will implement enhanced password complexity requirements to further strengthen the security of our platform. The rollout begins with Phase 1 on January 29, 2025.

What's Changing?

The new password standards will apply to:

• New users

• Users resetting passwords

• New providers added via UI

• Clients configuring stricter policies

New Password Complexity Requirements

All new passwords must include:

1. Minimum of 14 characters

2. At least one lowercase letter

3. At least one uppercase letter

4. At least one number

5. At least one special character

6. No spaces allowed

7. Cannot match the user's last password

8. Must avoid commonly used passwords maintained on the backend

Client Customization Options

• Password Length: Default minimum is 14 characters; organizations can require stricter lengths (16+ characters)

• Account Lockout: After 5 failed login attempts, accounts lock temporarily

Where These Changes Apply

• New Users

• Password Resets

• New Providers

Client UI and Error Messages Update

Enhancements to the password configuration UI in the "Client Detail/General/Password Complexity" section, along with improved error messaging.

Next Steps

• Review requirements and inform users

• Customization available through Administrator settings

• Alert internal teams handling onboarding, provider setup, and password resets

Support contact: support@closing.com or (866) 256-7464