Adjusting Password Requirements for Admin and Non-Admin Roles in Infigo

Overview

In Infigo, passwords for admin roles (Storefront Admin and/or Platform Admin accounts) require a minimum of 20 characters by default. This extra security measure ensures that high-level accounts are protected with stronger passwords. However, this can lead to confusion if you attempt to apply shorter password settings found under Configuration > Customer Settings, which primarily affect non-admin (Registered User) roles.

Scenario

You want to reset or create a password for a Storefront Admin or Platform Admin user. While entering a new password, you receive an error indicating the password must be at least 20 characters long—despite having changed the minimum length under Configuration > Customer Settings.

Why This Occurs

1. Separate Security Requirements
   Infigo applies stricter security rules for admin-level accounts by design. This includes a default password length of 20+ characters.

2. Customer Settings Only Affect Non-Admin Roles
   The password settings you see under Configuration > Customer Settings (including the minimum length field) do not override the admin requirement. These settings only apply to Registered User (non-admin) customer roles.

How to Verify and Adjust Admin Password Requirements

1. Identify the Account Role

   • Go to Admin > Customers (or a similar user-management area) in your Infigo portal.
   • Locate the user’s account and click Edit>Customer Roles to see the assigned roles.
   • Confirm whether the user is set as a Storefront Admin or Platform Admin.

2. Understand Default Admin Password Policy

   • For any Admin role, the system enforces a 20-character minimum.
   • Changing Customer Settings under Configuration > Customer Settings will not affect this requirement.

3. Update Non-Admin Password Settings (If Needed)

   • If you want to lower (or raise) password requirements for non-admin users (e.g., standard registered accounts), you can do so by:
     1. Navigating to Configuration > Customer Settings.
     2. Locating the Password Settings section.
     3. Adjusting the fields such as the minimum password length or complexity.
     4. Saving your changes.

Frequently Asked Questions (FAQ)

1. Why can’t I see any checkbox for admin password settings under Customer Settings?
   • Admin password requirements are not controlled by the same settings as non-admin accounts. The 20-character rule is a default security feature for any “admin” roles.
2. Can I remove the 20-character requirement for admin roles?
   • Generally, no; it’s a security feature. If there’s a specific need to reduce it, contact Infigo Support or consult your internal developers/IT team to explore potential advanced configurations.

Article last reviewed: [Feb 2025]