Passwords, lockouts and sessions
You will be able to: Set the company sign-in rules in Security Policy; Unlock, lock and sign out users; Follow a safe checklist when someone leaves.
- Read not done yet
- Self-check: not taken not done yet
- Lesson complete not done yet
Settings ▸ Security Policy holds the sign-in rules for the whole installation. A change never locks anyone out: existing passwords keep working and a stricter rule applies the next time a password is set.
| Setting | Shipped value | Range |
|---|---|---|
| Minimum password length | 8 | 6 to 64 |
| Require a digit | On | Upper-case, lower-case and symbol are off |
| Failures before lockout | 5 | 3 to 50 |
| Counting window | 10 minutes | 1 to 1440 |
| Lockout duration | 15 minutes | 1 to 1440 |
| POS PIN length | 4 digits | 4 to 8 |
How lockout works
Wrong passwords and PINs are counted for each user name on each device address. A device that keeps guessing locks itself out without locking the real person out at the till next to it. The whole login is paused only after twice the failures (at least 10) from all devices together. Lockouts live in memory, so restarting Zeyto Edge clears them.
Managing people on Users & Permissions
- Lockouts tab: Unlock clears the count, the pause and any administrator lock. Lock stops a login at once and signs it out everywhere. You cannot lock yourself or the last active Admin.
- Sign-in activity tab: the latest 500 events (good sign-ins, wrong passwords, pauses, resets, locks, refusals) with the device address. Many wrong tries for one name can mean guessing.
- Sessions tab: who is signed in now. Each session uses a licensed seat. Sign out this session, or Sign out everyone else before a restore or update.
- A new password or making someone Inactive signs them out everywhere within minutes.
Optional features
A reset code by e-mail can be switched on in Security Policy. It needs outgoing mail set up in Settings ▸ Sharing and an e-mail address on the user. It is off by default. Password expiry, password history and two-step sign-in are not available yet, so rely on strong passwords and quick removal of access.
Try it in the demo
- Open Settings ▸ Security Policy and read each rule and the sentence that spells the lockout out in words. Do not save.
- On Users & Permissions open the Sessions tab and find your own session marked This session.
- Open the Sign-in activity tab and read the 'What happened' column.
Public demo company, sign in as admin / demoAdmin123. Data refreshes nightly.
- Security Policy covers the whole installation.
- Defaults: 8 characters, 5 failures in 10 minutes, 15-minute lockout.
- Lock a leaver at once; do not delete.
- No password expiry or two-step sign-in yet.
Check yourself
4 questions on this lesson. Not timed, not the exam, and you can try again. Score 60% or more, and read the lesson, to complete it.