User Session Timeout and Password Settings

Overview: What are we talking about?

In order to protect our customer's data and meet security compliance requirements, Revelation Pets has session timeout and password requirement settings in place. These features are only applicable for business-side users and do not apply to pet parents. This article outlines the functionality of these security features.   

User Session Timeout

After 15 consecutive minutes of inactivity on the browser, users are required to log back in to continue using Revelation Pets. 

Note: If using a personal/non-shared device, users can use the “Remember Me” checkbox to keep the session active for 2 weeks without needing to log back in due to inactivity. 

Password Requirements

Revelation Pets requires strict passwords that must meet specific criteria including password length and special characters. Passwords must meet the following requirements:

• a minimum length of 8 characters
• at least one lower case letter
• at least one upper case letter
• at least one number
• at least one of these symbols: !@#$%^&*
• should not contain your name, email, or any dictionary words

When creating a password, a popup will display to let you know which requirements have or have not been met.

You may also see suggested hints to help you select a secure password that meets the requirements.

Once you see a message indicating that your password is 'good' or 'perfect' you'll be good to go!

Password Expiration

By default users are required to change their passwords every 90 days. Users will be expected to reset their passwords after 90 days and will see a countdown in the app reminding them to do this 10 days prior to the expiration. Users will not be able to re-use the last 4 passwords that they have previously used in Revelation Pets. Following good practices for password rotation is a great way to keep your data safe and all user accounts secure. 

Note: We understand that not all users will want to change their password every 90 days. This expiration timeframe can be adjusted or removed based on the individual needs of the business by updating the settings under Admin Panel » Your Account » Account Security. Here users can select an option from the dropdown including “off” and selections for each day through 365 days.