New security update live.
Security is of the highest importance to us. Everyday we put a lot of effort in keeping up with the highest and most recent security standards.
A recent pen test (where we let our databases, API, admin and other sensitive infrastructure voluntarely get hacked) was succesfull - For us that is, a little less for the hackers ;-). Consequently only minimal adjustments have been suggested for further improvement.
Following 2 adjustments have direct impact on users:
- Auto log out after 2 weeks of inactivity: unlike before we will log you out not after 30d but after 14d of inactivity. Next time you use Accurat you'll have to log in again.
Tip: use Accurat every week to avoid being logged out ;-). - Password check (not for SAML / SSO users): From now on we will check more thoroughly the quality of a password. Users that created their own Accurat password will still be able to keep using the same password. When creating a new password your browser (we cannot read your password) will check if your password is strong enough before it is accepted.
Tip: if you doubt the quality of your password we suggest changing it here.
Other security measures concern actions against hackers that try guessing your password by trying 100X times. Also password lock after 3 months of inactivity, automatic access freeze after a predetermined time, user management, SSO login etc. remain in place.