[HOW TO] Enforce strong password

In MailNow! 5 version 5.2.8, there is a new feature which allows administrators to force users with weak passwords to change their password. This feature which is available for both System and Domain levels, can be accessed by navigating to “Permission” and then “Password Policies” settings.  The following figure shows this new setting:




To enable this feature, navigate to Permission->Password Policies. Then, from the “Password Policy Setting”, choose the desired password complexity format and then tick the checkbox “Disable accounts which do not meet the password policies requirements” and save.

Once saved, the functionality of SMTP, POP3 and IMAP services for all users with weak passwords (password that do not comply with the password policy settings) will be disabled. At this point even if users with weak password log in to their WebMail, They will be redirected to the page where they can change their password. Once they change their password to a strong password that comply with the password policy rules, the functionality of SMTP, POP3 and IMAP servers will be enabled again automatically.