Local Authentication

Local authentication is the default method where users log in with an email and password stored in Vulnotes. No external identity provider is required.

Password requirements

Administrators can configure password policies in Administration > Settings > Security. The available options include:

• Minimum password length
• Require uppercase and lowercase letters
• Require numbers
• Require special characters
• Password expiration period

Users who do not meet the current password policy will be prompted to update their password on next login.