# Secure Authentication

## Two-Factor Authentication (TFA)

## User Account Policy

Device Control Plus user account policies let administrators regulate how user accounts are managed, based on login attempts, inactivity, and session expiry.

**To configure the User Account Policy, follow these steps:**

1. Log in to the Device Control Plus console.
2. Navigate to **Admin → User Administration → Secure Authentication → User Account Policy**.

### Configuration Options

**Account Inactivity**

Accounts can be disabled automatically after a specified period of inactivity. This helps prevent the misuse of dormant accounts and ensures that only active users have access to the console.

- Enable automatic account disablement after a specified period of inactivity.

**Session Expiry Settings**

These settings define how long a user session remains active before re-authentication is required.

Click **Save** to apply the changes, or **Cancel** to discard them.

## Password Policy

A password policy helps prevent unauthorized access by enforcing strong password requirements. Device Control Plus lets administrators enforce these requirements across user accounts.

**To configure the Password Policy, follow these steps:**

1. Log in to the Device Control Plus console.
2. Navigate to **Admin → User Administration → Secure Authentication → Password Policy**.

**Configuration Options**

Click **Save** to apply the changes.