Password policy

The same policy applies to every password — at the registration, at the reset, and at the change in the Profile tab. The customer portal examines every new password against the policy during the entry in the browser and releases the button for sending only when all rules are fulfilled and the confirmation agrees.

Rules

A password must fulfil the following rules:

Policy	Requirement
Length	At least 12 characters
Capital letters	At least one capital letter
Small letters	At least one small letter
Digits	At least one digit
Special characters	At least one special character

The following characters count as special characters:

#()^,.<>/\|{}[]-=_+$@!%*?&

Check during the entry

As soon as you fill in a password field, the list of the rules is below the field. Rules that are fulfilled are marked:

• ■ At least [number] characters
• ■ At least one uppercase character
• ■ At least one lowercase character
• ■ At least one number
• ■ At least one special character ([characters])

A button at the right edge of the field shows and hides the password. The tooltip changes between Show password and Hide password.

Confirmation

In addition to the rules, the confirmation must agree with the new password. The system does not examine earlier passwords of the account.

Messages

The following messages can occur:

Message	Cause
Your password does not meet the requirements.	The password breaks a rule for the length or the composition.
The passwords do not match.	The new password and the confirmation do not match.
Passwords do not match.	The confirmation differs from the new password. The message is directly below the confirmation field, before the form is sent.
The current password is incorrect.	During the change, the previous password was entered incorrectly.
Too many attempts. Please try again later.	Too many attempts in quick succession.
Your account signs in without a password. To set one, use the password reset link.	During the change: the account logs in without a password, for example through a provider. The password reset link link goes to the reset.
Your password reset link has expired. Please request a new one.	The link for the reset has expired. The link is valid for 15 minutes.
Invalid token.	The link for the reset is invalid.
Reset Password Mail Sent!	View after every request for a reset, whether the address is registered or not.

Attention

A password alone does not give the account sufficient protection. Also set up a passkey or the two-factor authentication.

See Change password.

See Reset password.