Difference between revisions of "Web Logging in"

Revision as of 21:31, 22 October 2017

Home > Using > Standard user interface > Navigation > Logging in

1 Overview

A user of Veloopti can have access to multiple organisations through their user account. After logging in to Veloopti you can change to any organisation that you have access to.

2 Organisation

As a user you login to Veloopti and then select the organisation that you would like to access. If you are a member of only one organisation then you will be taken directly to it.

3 Logging in

To login to Veloopti:

1. Enter a Veloopti URL that has a login screen

• veloopti.com or veloopti.com.au and click on the login button
• <region>.veloopti.com.au
• <region>.veloopti.com

1. Enter your username and password
2. [Optional] Select the Remember Me check box

• You will remain logged in until you log out or more than one hour of disconnection from the Veloopti servers occurs
• Not checking this box will log you out automatically out after one hour of inactivity

1. Press the ↵ Enter key on your keyboard or click on the button.

4 Password requirements

We care that you have a password that is resistant to being compromised. Therefore we have put into place the following rules for the creating and storing of your password.

1. It should be at least 8 characters and no more than 64 characters in length.
2. We allow all printing ASCII characters as well as the space character.
3. We replace multiple consecutive space characters with a single space character prior to verification, provided that the result is at least 8 characters in length.
4. We do not truncation your password.
5. We will confirm that your password is not known to be commonly-used, expected, or one that has been compromised elsewhere. We do not allow the following:
   1. Passwords that have been compromised is a previous password breach.
   2. Dictionary words.
   3. Passwords consisting of repetitive or sequential characters. (e.g. ‘aaaaaa’, ‘1234abcd’)
   4. Passwords that contain the word veloopti.
   5. Your username or derivatives.

After 3 failed attempts you will be locked out for 5 minutes. After locking yourself out for 10 times your account will be permanently locked and only able to be unlocked using the "I forgot my password" link on the login screen.

Your password is stored in a format that is resistant to offline attacks. We take your password, add a salt, and a cost factor and then generate your password as a hash. This hash is then stored and your plain text password is discarded. At no point in time do we store the text of your password.