[Just Chuck]

What do you have your's set to and why?

I'm going to implement a 4 char mimimum with a 5 minute idle lockout, my securty folks want at least 6 char minumum.

My reasoning is that after 10 tries, the device is locked out until I reset it. If a device is stolen, guessing the password will be hard unless the theif knows the owner. In my envirnment, that is not a likely scenereo. If a thief steals the device while unlocked, the password length isn't going to matter.

[acmoseley]

We have ours set to 6 characters and a 2 minute lockout. I don't really know why it's set like that...probably because that what the Senior Officers wanted.

Hope that helps.

[dshearon]

I have ours set to a 4 character min and a 20 minute timeout. as far as length goes, use the argument that even bank pin numbers are only 4 numbers and they seem pretty secure. youl find that if you didnt have a timeout policy set before most of your users got thier devices than you will probably get quite a bit of grumbling.

[pomc]

5 character minimum with at least 1 alpha and numeric.
30 minute lockout
New password every 150 days and remembers the last 3 passwords
User cannot change the timeout length or disable password
5 attempts then wipe

[NJBlackBerry]

6 characters and 60 minutes. And our users howled. But they were in a forest and no one listened.

[Stu_Bee]

Originally Posted by NJBlackBerry

6 characters and 60 minutes. And our users howled. But they were in a forest and no one listened.

Personally I think 60 minutes idle timeout is more than generous. That's plenty of time for someone to leave their BB in a coffee shop..someone else to pick it up, and start fiddeling with corporate email and data.

Unfortunately many of our policies are designed solely for Easy of use rather than for Security....when really it should be a blend of the two. That's what happens when the Security dept has no power in the company, and policies are changed when people complain.
======
Since I'm new to BlackBerry..I don't quite understand the 'Wipe after 5 tries'. Are you saying it's possible for someone to gain access to the data contained on the blackberry without a password? Is it not encrypted?

[arconsulting]

>> 'Wipe after 5 tries'

If an incorrect password is entered 5x, the device will erase all the data (i.e. emails, contacts, calendar, etc.) on the device.

The default is 10x.