SECTION 4.1.2: PASSWORD POLICY & CREDENTIAL RECOVERY

Visit Marketplace
Section 4.1.2: Password Policy & Credential Recovery
Enforcing strong cryptographic password hashing, complexity requirements, and secure recovery flows.

Password Policy & Credential Recovery

Protecting account access through industry-standard credential encryption and recovery protocols.

All passwords stored in ePaisay are hashed using modern Argon2id / bcrypt algorithms with unique salts per user.

Core Architecture & Principles

  • Argon2id Hashing: State-of-the-art memory-hard password derivation preventing GPU-accelerated brute force attacks.
  • Complexity Enforcement: Minimum 12 characters requiring uppercase, lowercase, numeric digits, and special symbols.
  • Zero-Knowledge Reset Flow: Time-limited, single-use signed recovery links dispatched to verified identity channels.

Operational Process & Execution Flow

Password Modification

Update credentials regularly via Account Settings by entering current and new passkeys.

Credential Recovery

Initiate a password reset from the login screen using your verified email address.

Confirmation Verification

Click the signed recovery token in your inbox and establish a new compliant password.

Password Advisory

ePaisay staff will never have access to plaintext passwords. Never reuse passwords from other online services.

Last updated: Oct 01, 2025