Tick on if the staff member is allowed to use Staff Presets

1. Passwords must be at least 8 characters long
1. If a password is shorter than 8 characters, it will be rejected with a clear error message.
2. Passwords may be up to 128 characters long
   
   
3. Passwords do not expire automatically.
1. Users are not required to change their passwords periodically.
   
   
4. When an administrator creates or resets a user’s password:
1. The user will be required to change their password at first login.
   
5. Accounts will be locked after 10 consecutive failed login attempts.
   
   
6. Locked accounts will:
   
1. Automatically unlock after 30 minutes, or
2. Be manually unlocked immediately by an administrator.
   
7. Passwords are never stored in plain text.
   
   
8. All passwords are securely hashed using one of the following:
   
1. bcrypt (cost ≥ 12)
9. These methods are verified through code review to ensure compliance.
   
   
10. All password-related actions are recorded for security and auditing purposes, including:
1. Password changes
2. Password resets
   
11. The Vault and Bailment systems enforce identical password rules, ensuring a consistent user experience and security standard.
    
    
12. New users cannot be created without a password being set at the time of creation.
    
    
13. For security monitoring and auditing, the system records:
1. Last Successful Login
2. Last Failed Login Attempt
3. Total Login Attempt Count