Security
The Security settings let you control how your Powerlynx system is protected. They are grouped on a single page under Config → Security, so as new protection options are added they all live in one place.
Password Policy
The Password Policy lets you set how strong the passwords for your administrator accounts must be. Instead of relying on a single fixed rule, you decide the minimum length and which kinds of characters are required — so every person who manages your Powerlynx system has to use a password that meets your organisation's security standards.
Where to find it
Open Config → Security → Password Policy.

Out of the box the policy is enabled with strong defaults — a 14-character minimum with every character requirement turned on. Each account can then adjust the rules to fit its needs (the example above shows a more relaxed configuration).
The rules
Each rule can be turned on or off independently:
- Minimum length — how many characters a password must have at least (default: 14).
- Require uppercase letter — the password must contain at least one capital letter (A–Z).
- Require lowercase letter — at least one small letter (a–z).
- Require digit — at least one number (0–9).
- Require special character — at least one symbol such as
!,#,$,%,^,&,*. - Block keyboard sequences — rejects predictable patterns like
qwerty,12345,asdfghorabcdef(and the same patterns typed backwards). This stops easy-to-guess passwords even when they are long enough.
When the policy applies
The policy is checked whenever a password is set or changed:
- Creating a new administrator account.
- An administrator changing their own password.
- An administrator changing another administrator's password.
- Resetting a password through the "forgot password" flow.
- Signing up a new account during registration.
As you type a password, the requirements are checked in real time and any that aren't met are shown right below the field, so you know exactly what to fix before saving.

INFO
Existing administrators are not affected when you change the policy. Nobody is forced to reset their password and nobody is locked out — current passwords keep working until each administrator next changes their own.
TIP
Policy changes take effect immediately for the next password operation, but they are never applied retroactively to passwords that are already set. You can tighten or relax the rules at any time — for example, lowering the minimum length or turning off some character requirements for a less strict setup.