{"id":3033,"date":"2019-05-07T19:22:16","date_gmt":"2019-05-07T13:52:16","guid":{"rendered":"https:\/\/www.idslogic.com\/blog\/?p=3033"},"modified":"2025-02-27T10:48:02","modified_gmt":"2025-02-27T05:18:02","slug":"how-to-make-sitefinity-backend-more-secure","status":"publish","type":"post","link":"https:\/\/www.idslogic.com\/blog\/how-to-make-sitefinity-backend-more-secure","title":{"rendered":"How to Make Sitefinity Backend More Secure"},"content":{"rendered":"

The Sitefinity Backend is accessed by adding \/Sitefinity to the web site URL. Users are then required to provide a valid username and password.<\/span><\/p>\n

In this blog we will learn how you can add extra layers of security to the Sitefinity CMS backend login page.<\/span><\/p>\n

1- Enforce backend user to make a strong password<\/span><\/strong><\/span><\/p>\n

Here are some very general password guidelines<\/span><\/p>\n

    \n
  1. Passwords should be at least 8 characters longer.The longer the better<\/span><\/li>\n
  2. Passwords should be mixed-case<\/span><\/li>\n
  3. Passwords should contain a mixture of numbers & letters<\/span><\/li>\n
  4. Passwords should not use common words<\/span><\/li>\n<\/ol>\n

    We can control the password policy settings on a Membership provider level. This enables you to have different policies for the default provider. To navigate to these settings, go to Administration -> Settings -> Advanced -> Security -> Membership Providers<\/strong><\/span>. You will see a list of membership providers. Expand the Default membership provider and click on Parameters.<\/span><\/p>\n

    The Parameters menu presents various options for configuring password policy on a membership provider level. Here\u2019s what it should look like:<\/span><\/p>\n

    \"\"
    source: progress.com<\/figcaption><\/figure>\n

    To Design Your Password Strength Policy<\/span>
    \n<\/span><\/p>\n