...
Ongoing Password Management Process
...
30 Day Expiry
...
To minimise the risk of password exposure, Salesforce enforces a password expiry every 30 days. Each employee is required to change their user’s credentials to a new and unique password, as Salesforce tracks the history of the past 3 passwords used by the user.
...
Using BitWarden, employees generate a unique 14-digit password that they use to log into Salesforce with. Each employee is also able to see whether their existing password has been exposed in any data breaches, and if so, is immediately required to change their Salesforce login credentials.
...