A user logs in to the system using a password. Only users with the right to assign and or change passwords define them. A password should be rigorous in its definition. Passwords are, at a minimum, a case sensitive 8-character mix of upper case letters, lower case letters, numbers, and special characters, including at least one of each (e.g., emPagd2!). There is no recovery mechanism for forgotten passwords, so a new one must be created for a user who can't remember a password. At least four characters must be changed when a new password is created.
