What are the Password Requirements for Citrix?

Complexity Requirements

• It must not contain the user's account name or parts of the user's full name that exceed two consecutive characters.
• It must be at least eight characters in length.
• It must contain characters from three of the following four categories:
  • English uppercase characters (A through Z)
  • English lowercase characters (a through z)
  • Base 10 digits (0 through 9)
  • Non-alphabetic characters (for example, !, $, #, %)

Complexity requirements are enforced when passwords are changed or created.

Password History

Users cannot use any of the previous 12 passwords they have had.

Password Change Frequency

If the password has not been changed in 90 days, it will be mandatory to change it.

Lockout Policy

• Users have a maximum of 5 login attempts before they are locked out.
• The lockout will expire after 5 minutes.
• If the user gets the password wrong 4 times and logs in on the 5^th time, it will reset the lockout count to 0.
• Once the user is locked out, the following message will be displayed: “You have exceeded the maximum login attempts. Please contact your administrator”.