> For the complete documentation index, see [llms.txt](https://yudu-sentinel.gitbook.io/sentinel-documentation/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://yudu-sentinel.gitbook.io/sentinel-documentation/resources/profile-settings/security.md). # Security Password and Two-Factor Authentication Each Sentinel console user has access to manage their own security credentials. ### Passwords All system user account passwords must adhere to the strict password rules. {% hint style="info" %} The new password must contain each of the following: * At least 8 characters * At least 1 lowercase letter * At least 1 uppercase letter * At least 1 number * At least 1 special character {% endhint %} Access to the the console (or linked Apps) requires the entry of your account email and password. Console access also requires the **console access** permission. The [account password section](/sentinel-documentation/resources/profile-settings/security/account-password.md) gives information about how to manage your password. ### Two-Factor Authentication Two-Factor Authentication is optional (unless enforced by the system administrator) - however it is recommended for all users to enable Two-Factor Authentication for optimal security. Two-Factor codes are requested and entered after successful password authentication. We recommend the Google Authenticator app to manage Two-Factor authentication - however other tools are compatible. ### Enforced Two-Factor Authentication System administrators can force all users to setup and use Two-Factor Authentication for all system access. This is the best strategy for maximum security. When Two-Factor Authentication is enforced all users are forced to setup Two-Factor Authentication after successfully logging in. The setting to enforce Two-Factor Authentication can be found in the [system settings](/sentinel-documentation/system-administration/system-settings.md). ### Forgotten Passwords Password reset links can be found on the login page of the system. Triggering a reset email will send a temporary reset link to the users email. ### Lost Two-Factor Authentication Sometimes a device with your Two-Factor Authentication application can be lost or stolen. This can be a problem when you need access to the system. {% hint style="info" %} We advise in this situation to contact a System Administrator. Note that for data security reasons YUDU Sentinel generally do not have login access to your system. The System Administrator has the ability to deactivate your Two-Factor settings which will allow you to gain access. {% endhint %} {% hint style="danger" %} It is the responsibility of the System Administrator to ensure the request for Two-Factor Authentication is genuine before deactivating a user's Two-Factor Authentication. If in doubt please contact YUDU support. {% endhint %} ### Credential Health Password and Two-Factor status are shown on the the Home screen for all users: This is a reminder for all logged-in users to improve security. It is recommended to rotate system passwords regularly and always enable Two-Factor Authentication.
A good way to periodically ask system user's to check or update their information and password is via user verification emails.