Update,
With a little hack to the I2CE, I was able to improve the password strength by enforcing password length to be at least 8 characters and password structure to be a mix of numbers and special characters.
I am still looking forward to your help in implementing these features:
- Number of unsuccessful login attempts before the
username is made inaccessible automatically (locked) = 3 times
-
Period after which a password must be changed = 365 days
-
Reusability of old passwords = to be prohibited for 12 month
Thanks