Account Management Best Practices

Intermediate

Password policies, account auditing, disabling accounts, and managing credentials across a live solution.

What you'll learn

Password complexity and expiration settings
How to safely disable accounts when staff leave
Using scripts to audit active accounts
The risks of shared service accounts

Having correct privilege sets is only half the security picture. The other half is managing accounts over time: enforcing strong passwords, disabling accounts when people leave, auditing who has access, and handling the inevitable "forgot my password" without creating security holes.

1/4

Password settings

In File > Manage > Security, click "Password Settings" to configure: minimum length, complexity (mixed case, numbers, symbols), expiration interval (in days), and whether users can change their own passwords. These settings apply to local FileMaker accounts only -- external server accounts use the directory service's password policy.

Security at the Field Definition Level Encryption at Rest