Changing your password in Mosaic is easy if you're already logged in.
Open the Tools menu, then click Change your password.
Locked account or forgotten password
If you're not logged in and have forgotten your password, we can reset it for you. Simply raise a new case and let us know the name and username to reset.
📌 Note: The Access Group doesn't reset passwords for end users.
Password requirements
For Database authentication only when password complexity policy is enforced, new passwords must meet the following guidelines:
The password doesn't contain the account name of the user.
The password is at least eight characters long.
The password contains characters from three of the following four categories:
Latin uppercase letters (A through Z).
Latin lowercase letters (a through z).
Base 10 digits (0 through 9).
Non-alphanumeric characters such as: exclamation point (!), dollar sign ($), number sign (#), or percent (%).
See this link for further information:
Password Policy - SQL Server | Microsoft Learn
Other things to be aware of:
Passwords can be up to 128 characters long. Use passwords that are as long and complex as possible.
Password policies may change with subsequent versions of SQL Server, the link above will be to the latest version.
Password expiration can be set between 0-999 days - this is set as default to 42 days.
Password login attempts can also be defined at the server level.
The default password policy (complexity, number of login attempts etc.) if used will be determined at the server level.
Password complexity policies are designed to deter brute force attacks by increasing the number of possible passwords.
SQL Server's "Enforce password history" policy remembers your last 24 passwords by default, so you can’t reuse an old password until you’ve used 24 different ones.
Minimum password age is set to 1 day (24 hours), meaning users can’t change their password again until a full day has passed. This prevents them from quickly cycling through 24 passwords just to reuse an old one. If they really wanted to do that, it’d take them 25 days.
Hosted customers should raise a new case online and reference the title of this article.