Password policy

June 2025: passwords have at least 14 characters; two-factor authentication is mandatory for administrator accounts. See password rotation.