The importance of good passwords
Over the long weekend, my facebook account got hijacked. I don’t know how but I’m just thankful that it was only my facebook account and that the damage was minimal (annoying emails to friends). These types of things are a good reminder to set a good password policy for salesforce.com and any other SaaS systems you administer.
You can update your org’s password settings by clicking on Setup | Security Controls | Password Policies. Determining the right password policy is always a trade off between ease of use and security. You don’t want to make it so complex that your users have to call for help every time they try to login, but you also don’t want to let your users use their birthday as their password (or worse, their luggage combination: 12345). There are many tips and tools out there to help generate secure passwords.
If your users seem to struggle with the issue, don’t worry. Salesforce will be releasing some new single sign-on features later this year that should help you out.
Do you have a nightmare story about an account being hacked/hijacked? Share it in the comments.
Related posts:
