Password policy

Disclaimer

All screenshots in the article were taken in the Dutch version of Nmbrs Accounting.

To ensure the security of accounts and data, Visma Connect enforces strict rules for creating and changing passwords.

Requirements for strong password

• Minimum length: A password must consist of at least 15 characters. This makes the password resistant to brute-force and dictionary attacks.
• Allowed characters: You can use lowercase letters, uppercase letters, numbers, special characters, and language-specific characters.

Check for leaked passwords (Have I Been Pwned)

Visma Connect automatically checks all new and changed passwords against the Pwned Passwords dataset from Have I Been Pwned.

• Prevention: If a chosen password appears in this database of hundreds of millions of leaked passwords, it is immediately rejected.
• NIST Guidelines: This blocking mechanism follows international standards (such as those from NIST) to prevent the reuse of compromised passwords.

Personal Information Prohibited

It is not permitted to include personal information in the password. Combinations of the following elements are automatically blocked:

• (Parts of) your name or email address.
• Common words known from previous data breaches.