# Password policy

June 2025: passwords have at least 14 characters; two-factor authentication is mandatory for
administrator accounts. See [password rotation](../procedures/password-rotation.md).