===== Security and Authentication =====

----

==== Security Reminder ====

Please remember that your account allows access to personal content on the server.  It is very important that you **PROPERLY SECURE YOUR LOGIN CREDENTIALS**!

----

==== Authentication Requirements ====

=== Passwords ===

== Length ==

  * Passwords must be a minimum of 20 characters.
  * This is to accommodate the length of passwords auto-generated by Apple's default password manager.
  * If you are not using Apple's password manager to generate a password, feel free to make it longer (32-64 characters).

== Complexity ==

  * Use a password manager!  Do not try to make a password that you can remember.
  * Use a combination of different kinds of characters.
  * Mix upper and lower case, numbers, and special characters for higher entropy passwords.
  * Do not write your password on paper or share it with others.

=== Second Factor Authentication ===

2FA is required to create an account.  You must set up an authenticator app initially, and can add additional/alternate methods once you sign in.

== Authenticator App ==

  * A 2FA authenticator app is required for initial sign up.
  * The Google Authenticator and Open Authenticator apps should be supported.
  * Due to setting a larger key size, Microsoft Authenticator (and potentially Authy) is not supported.  Please reach out to your administrator if this is an issue.

== Additional methods ==

  * Once you have created an account, you can add additional 2FA methods.
  * Webauthn is supported, including hardware keys like a Yubikey.
  * When logging in, you can select which method to use.
  * To change the default method presented at login, reach out to an administrator.