Description

Wolkvox solutions implement a strict password management policy to ensure the security of access. All passwords must meet an alphanumeric standard and have a minimum length of 10 characters. Additionally, as an extra security measure, users are required to change their password on their first login. Passwords are stored securely using a 12-character "salt" and encrypted with the SHA256 algorithm, protecting against potential brute-force attacks or leaks. Wolkvox also offers secure password recovery methods and allows integration with advanced authentication systems, such as Microsoft Entra ID (formerly Azure AD) and Active Directory, for centralized and secure identity management.

Features

Password Requirements

• Minimum Length: 10 characters, ensuring robustness against guessing attacks.
• Alphanumeric Complexity: Passwords must include letters (uppercase and lowercase), numbers, and preferably special characters.
• Rotation on First Login: Users must change their temporary password to a permanent one on their first login, reinforcing security from the start.

Storage and Protection

• SHA256 Encryption: Passwords are stored using a secure cryptographic hash, preventing recovery in plaintext.
• 12-Character "Salt": A unique value ("salt") is added to each password before encryption, protecting against rainbow table attacks.
• Secure Recovery: Password recovery processes are designed to prevent impersonation, using verified channels and multi-factor authentication (MFA) when necessary.

Integration with Authentication Systems

• Microsoft Entra ID and Active Directory: Wolkvox allows integration with these services to centrally manage identities and access, facilitating compliance with corporate policies.
• Multi-Factor Authentication (MFA): As an additional security layer, MFA is recommended (and sometimes required) for critical access.
• IP Restrictions: Access restrictions can be configured based on IP addresses, limiting connection attempts to authorized locations.

Customer Responsibilities

• Role Assignment: Wolkvox customers are responsible for assigning roles and privileges to their users based on operational needs, following the principle of least privilege.
• Flexible Configuration: Through the wolkvox Manager module, customers can adjust password policies and authentication methods according to their specific requirements.