Username: 3–32 characters, lowercase letters, digits, and . _ - only (no spaces). Choose something you can remember but is not easy to guess.
Secure password guidelines (NCSA / NIST-aligned)
Minimum 12 characters. Use a password manager — paste is supported. After sign-up you must enable MFA (authenticator app).
- Enable MFA (authenticator app) — required for every account; it reduces phishing risk more than rotating passwords alone.
- Use at least 12 characters; length matters more than complexity alone.
- Combine lowercase, uppercase, digits, and special characters, or use a long passphrase from a password manager.
- Avoid predictable passwords: sequences, common words, keyboard patterns, or known breached passwords.
- Do not reuse the same password across systems.
- Show password while typing and paste from your password manager to avoid typos.
- Systems limit sign-in attempts to resist password guessing.