Security Policy and Passwords
ShipZone applies the following safety standards to all of its systems:
- Minimum password length: 12 characters
- Complexity: Uppercase, lowercase, numbers and special characters are required.
- Username restriction: Passwords cannot contain your username or email address.
- Expiry: Employee accounts are reset every 90 days; user accounts every 180 days.
- Cooling prevention: The last 10 passwords cannot be reused.
- Multifactor Authentication (MFA): Mandatory for all staff.
- Storage: Passwords are stored using the hash bcrypt algorithm; never in plain text.
- Access control: Access of former employees will be revoked within 24 hours.

