--- title: "Password settings in Nutrient Workflow" canonical_url: "https://www.nutrient.io/guides/workflow-automation/admin-guide/settings/password-settings/" md_url: "https://www.nutrient.io/guides/workflow-automation/admin-guide/settings/password-settings.md" last_updated: "2026-06-09T10:25:14.572Z" description: "Define and enforce password policies, expiration, and strength settings for your organization in Nutrient Workflow." --- # Manage your organization’s password settings To open password settings: 1. In the upper-right corner, hover over the **Settings** icon. 2. Select **Password Settings**. This opens the window where you configure password policies for your organization. From this window, you can manage password expiration settings and password strength settings.![Password Settings configuration screen with expiration and strength options](@/assets/guides/workflow-automation/files/1274/password-settings-screen.png) ## Configuring password expiration settings To configure password expiration: 1. Select **Enforce Password Expiration**. 2. In **Expiration (days)**, enter the number of days before a user’s password expires. ## Configuring password strength settings To configure password strength: 1. Select **Enforce Password Strength**. 2. Enter a minimum password length. 3. Enter a maximum password length. 4. Define the required password values with a regular expression. To restore the default password strength expression, click **RESTORE DEFAULT STRENGTH EXPRESSION**. ## Understanding policy enforcement When enabled, Nutrient Workflow applies password policies to all password operations, including: - Initial password creation - Password changes started by users - Password resets, including self-service resets and administrator-initiated resets This keeps password requirements consistent across your organization. ## Reviewing account lockout notifications When a user account is locked out because of failed login attempts: - The login screen displays lockout messages - The user interface notifies users of their lockout status These messages explain why users can’t access their accounts when lockout occurs. ## Configuring inactivity logout and redirect Nutrient Workflow can sign users out automatically after a period of inactivity. When the timeout expires: - The system redirects users to the login screen. - The logout flow starts when the configured inactivity threshold is reached. - The behavior applies to both standard user accounts and guest sessions. Configure inactivity timeout settings in system configuration to match your security requirements. For more information, refer to the [system settings reference](https://www.nutrient.io/guides/workflow-automation/admin-guide/settings/system-settings.md) guide. ### Reviewing the inactivity warning dialog Before automatic logout starts, Nutrient Workflow shows a warning dialog so users can stay signed in. The dialog shows a countdown to logout and enables users to extend the session or sign out immediately.![Are you still here? warning dialog with a countdown, Log out now, and I’m still here buttons](@/assets/guides/workflow-automation/admin-guide/settings/idle-warning-dialog.png) - **I’m still here** — Extends the session. The inactivity window restarts when the user clicks the button. - **Log out now** — Signs the user out immediately and returns them to the login screen. - **Close (X) or Esc** — Dismisses the dialog without extending the session. Automatic logout still occurs at the original time. The dialog stays open until the user acts on it. Clicking outside the dialog doesn’t dismiss it. If the user resumes activity in another tab or inside an embedded form, the dialog closes on its own and the session stays active. Two system settings control this behavior: - `InactivityLogoutMinutes` — Minutes of inactivity before automatic logout. - `InactivityWarningMinutes` — Minutes of warning before automatic logout. The dialog appears at `InactivityLogoutMinutes` minus `InactivityWarningMinutes`. The default is `2`. For example, if `InactivityLogoutMinutes = 15` and `InactivityWarningMinutes = 2`, an idle user sees the warning dialog at the 13-minute mark. If the user doesn’t act, the system signs them out at the 15-minute mark. ## Related information - For information on forcing a user to change their password at the next login, refer to the [force password change](https://www.nutrient.io/guides/workflow-automation/faq/how-do-i-force-a-user-to-change-their-password-on-the-next-login.md) guide. - For information about configuring account lockout rules, refer to the [configure account lockout rules](https://www.nutrient.io/guides/workflow-automation/faq/is-there-any-way-to-configure-account-lockout-rules.md) FAQ. --- ## Related pages - [Define your organization's business hours easily](/guides/workflow-automation/admin-guide/settings/business-hours.md) - [Credential Center](/guides/workflow-automation/admin-guide/settings/credential-center.md) - [Manage your database connections effectively](/guides/workflow-automation/admin-guide/settings/database-sources.md) - [Streamline email management with inbound monitors](/guides/workflow-automation/admin-guide/settings/email-monitors.md) - [Effortlessly create and manage your dashboards](/guides/workflow-automation/admin-guide/settings.md) - [Manage your organization's holiday schedules](/guides/workflow-automation/admin-guide/settings/holidays.md) - [Scheduling and managing reports](/guides/workflow-automation/admin-guide/settings/report-scheduler.md) - [Efficiently manage notifications with the Notification Center](/guides/workflow-automation/admin-guide/settings/notification-center.md) - [Set up Single Sign-On (SSO) with SAML 2.0](/guides/workflow-automation/admin-guide/settings/single-sign-on-sso.md) - [Manage system messages in your workflow easily](/guides/workflow-automation/admin-guide/settings/system-messages.md) - [Easily manage translations for your workflows](/guides/workflow-automation/admin-guide/settings/translations.md)