Authentication & Security Policies
User Management & Security
INDPayroll follows stringent security practices to protect sensitive payroll data.
A. Password Security
- Enforce strong password requirements (uppercase, lowercase, numbers, symbols).
- Automatic password expiration cycles.
- Prevent reusing the last 3–5 passwords.
B. Two-Factor Authentication (2FA)
- Admins can enable 2FA for enhanced protection. Methods include email OTP, SMS OTP, and authenticator app (if enabled).
C. Session Management
- Automatic session timeout after inactivity.
- Browser/device session limit per user.
- Real-time session logs for monitoring unusual access.
D. IP & Device Restrictions (Optional Feature)
- To enhance security, administrators can restrict system access based on whitelisted IPs (office network only) and registered devices or browsers.