Security Configuration

The Security Configuration feature allows you to enhance your Organization’s security by establishing specific authentication rules.

This guide is designed to assist you in configuring the Security Configuration, focusing on the following aspects:

• Multi-factor Authentication
• Password Expiration

Multi-factor Authentication

Elevate the security of your organization by implementing Multi-factor Authentication, an additional layer during user logins.

To enable multi-factor authentication for the users of your organization, log in to your Contentstack account and follow the steps below:

1. Select the Organization from the dropdown on the header and click on the “Org Admin” icon in the left navigation panel.
   Or, you can simply click on the “Org Admin” cog beside the Organization that you intend to open.
2. Click on the Security Configuration tab on the left panel.
3. By default, you will see the Multi-factor Authentication page. Enable it using the toggle switch.
4. Click Save to save your configuration.
   
5. Upon activation, all users within the Organization are required to configure Multi-factor Authentication when logging in.
   

Password Expiration

Configure password expiration to prompt regular password updates from Organization users.

To enable and customize the frequency of password resets for Organization users, log in to your Contentstack account and follow the steps below:

1. Select the Organization from the dropdown on the header and click on the “Org Admin” icon in the left navigation panel.
   Or, you can simply click on the “Org Admin” cog beside the Organization that you intend to open.
2. Click on the Security Configuration tab on the left panel.
3. Click on the Password Expiration tab and enable the toggle switch to initiate password expiration.
4. Enter the number of days (between 1 to 365) for which you want users to update their passwords in the Password Duration field.
5. Click Save to save your configuration.
   

Note: If password expiration has been set for multiple organizations that you are part of, the system will choose the shortest expiration period. Additionally, if enforcement actions occur in any of these organizations, you'll be prompted to enable multi-factor authentication (MFA) and initiate a password reset.

By following these steps, you can effectively strengthen the overall security of your organization.