When you create an account using email and password, the platform requires a minimum of 12 characters and checks your password against known breach databases and personal identifiers to protect your account.
At Immersive, we prioritize the security of user accounts during the registration process by enforcing password requirements.
When creating a new user account with an email/password authentication type, the following password requirements apply:
Minimum Length
Your password must be at least 12 characters long. Longer passwords are more secure, and we encourage you to go beyond the minimum.
Complexity
There's no specific complexity requirement for passwords. You're not required to include numbers or non-alphanumeric characters. We recommend creating a strong, unique password for better security.
Password Expiration
We don't enforce password expiration by default. Following the guidelines from the National Institute of Standards and Technology (NIST), we believe password resets should be prompted only in the event of a known compromise or every 365 days. This approach encourages users to create longer, more robust passwords that are harder to crack.
Password Checks
To check your password's strength and prevent the use of easily guessable or publicly available information, we run the following checks:
- We check if your password contains your email address, username, first name, last name, company name, or landing page subdomain. If any of these are found, the strength score of your password will be reduced.
- We compare your password against a database of known compromised passwords available at https://haveibeenpwned.com. If your password appears in a breach dataset, we'll notify you and recommend choosing a different password. You can find more information about this database in their About section.
We also provide guidance when a password is rejected. For example, if you try to set your password as "qwertyuiop," we'll let you know the password is weak and explain that passwords with straight rows of keyboard keys are easy to guess.
These checks help protect your account.