nexus/security-policies
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Password policy: add YubiKey guidance for prod access

Browse source
This commit is contained in:
Katrin Hoffmann 2026-04-14 09:30:00 +00:00
parent 9bb02441f2
commit 6c35b9ece3
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
policies/password-policy.md
View file

@ -19,3 +19,8 @@ Personal vaults must not store Nexus credentials.
Non-compliance results in account lockout after 5 failed attempts.
Locked accounts require IT helpdesk intervention.
## Hardware tokens
For production system access, hardware security keys (YubiKey 5) are preferred over TOTP.
Contact IT to request a YubiKey. Replacement: maximum once per 2 years.