Setting the Database Password Policy

About Password Policies

When you create a user account, a default password policy is assigned to that user account. The default password policy for a newly installed database includes these directives:

• The password for the user account expires automatically in 180 days.

• The user account is locked 7 days after password expiration.

• The user account is locked for 1 day after 10 failed login attempts.

The default password policy is assigned to user accounts through a database object called a profile. Each user account is assigned a profile, and the profile has a number of attributes that together describe a password policy. The database comes with a default profile (named DEFAULT), and unless you specify otherwise when you create a user account, the default profile is assigned to the user account.

For better database security, you may want to impose a more strict password policy. For example, you may want passwords to expire every 70 days, and you may want to lock user accounts after three failed login attempts. (A failed login attempt for a user account occurs when a user enters an incorrect password for the account.) You may also want to require that passwords be complex enough to provide reasonable protection against intruders who try to break into the system by guessing passwords. For example, you might specify that passwords must contain at least one number and one punctuation mark.

You change the password policy for every user account in the database by modifying the password-related attributes of the DEFAULT profile.

Modifying the Default Password Policy

You modify the default password policy for every database user account by modifying the password-related attributes of the profile named DEFAULT.

To modify the default password policy:

1. Go to the Database Home page.

   See "Accessing the Database Home Page".

2. At the top of the page, click the Server link to view the Server subpage.

3. In the Security section, click Profiles.

   The Profiles page appears.

4. In the Select column, select the profile named DEFAULT, and then click Edit.

   The Edit Profile page appears.

5. Toward the top of the page, select the Password subpage.

   
   Description of the illustration edit_profile.gif
   
   

6. Change field values as required. Click the flashlight icon next to each field to view a list of choices. (Click Help on this page for a description of the fields.)

7. Click Apply to save your changes.