# Password Policy Template, Word and PDF Source: https://nerix.ai/templates/password-policy Buy to download This page shows a preview. Buy the document on nerix.ai to download it as Word and PDF and print it. https://nerix.ai/templates/password-policy # Password policy Set simple, current rules for passwords and sign-in that staff can follow. Before you send it This follows widely used current advice: long passwords, a password manager and multi-factor sign-in rather than frequent forced changes. If a law, contract or customer sets other rules for your systems, follow those. ## Fill it in and preview You are signed in. Fill it in your workspace and it is kept as a document you can send, share and have signed. [Open in your workspace](https://app.nerix.ai/documents/templates/password-policy) **€4.99, pay once, Word and PDF** Included in every paid nerix plan. ### Password policy **Brightwater Analytics** **Takes effect:** 1 January 2027 **Owner:** Head of IT ## 1. Purpose Passwords are the front door to our systems and our customers' information. This policy sets simple rules that keep that door shut. ## 2. Who it covers All employees, contractors and interns, and every account used for company work, including cloud services and company devices. ## 3. Making a password - Use at least **14 characters**. A long phrase of several unrelated words is better than a short, complicated one. - Use a different password for every account. - Do not use names, dates, the company name or a password you used before. - Let the password manager create and store them. 4. The password manager 5. Multi-factor sign-in 6. Changing passwords 7. Sharing 8. Phishing and checks ⁦2 / 2⁩ The full document unlocks when you download The rest is written and waiting, with your answers in place. Templates are a careful starting point, not legal advice. Where the law matters, check what applies where you are. IT and projects ## What this template is for A password policy with length rules, multi-factor sign-in, password managers, sharing rules and what to do after a leak. Fill it in, then Word or PDF. It is free to fill in online and needs no account. The finished Word document and PDF cost €4.99, paid once. [See all IT and projects templates](https://nerix.ai/templates/it-projects) IT and projects ## What you fill in The form asks for 12 details. The document fills itself in as you type. - ### Company name For example: Brightwater Analytics - ### Takes effect on For example: 1 January 2027 - ### Policy owner For example: Head of IT - ### Who and what it covers For example: All employees, contractors and interns, and every account used for company work, including cloud services and company devices. - ### Minimum password length Length matters more than odd symbols. 12 or more is a good floor. For example: 14 characters - ### Approved password manager Name the tool staff should use. For example: Bitwarden, provided by the company - ### Where multi-factor sign-in is required For example: Email, the company directory, finance and HR systems, source code hosting, the admin panel of every cloud service, and any account that can reach customer data. - ### Accepted second factors optional For example: An authenticator app or a hardware security key. Text messages only if nothing better is available. - ### When a password must be changed For example: Only when it may have been exposed, or when someone who knew it leaves. There is no routine change every few months. - ### Shared, admin and service accounts optional For example: Shared accounts are avoided. Where one is needed, the password lives in the password manager vault for named people, and admin accounts are separate from daily accounts. - ### Where to report a lost or leaked password For example: Tell it@brightwater.example or call 0000 straight away. Do not wait to be sure. - ### If the policy is not followed optional For example: A breach is handled with the staff member first as a chance to learn. Serious or repeated breaches go through the HR process. IT and projects ## What is inside The parts of this document, in order. - 1 1. Purpose - 2 2. Who it covers - 3 3. Making a password - 4 4. The password manager - 5 5. Multi-factor sign-in - 6 6. Changing passwords - 7 7. Sharing - 8 8. Phishing and checks - 9 9. Lost or leaked passwords - 10 10. If the policy is not followed Templates ## How it works - 01 ### Fill in Type your details in the form. The document fills itself in as you type; click any gap to jump to its field. - 02 ### Check Read it through. Gaps you have not filled stay marked, so nothing goes out half done. - 03 ### Download Pay once and get it as a Word document to edit further and as a PDF to send or print. The link comes by email too. ### Was this template helpful? IT and projects ## Questions people ask ### What details does this template ask for? The form asks for 12 details, starting with Company name, Takes effect on, Policy owner, Who and what it covers, Minimum password length. 3 more are optional. ### How much does this template cost? €4.99, paid once. Filling it in and seeing the first part is free. You pay when you download the finished Word document and PDF, with no account and no subscription. Every paid nerix plan includes it. ### Can I download this template as Word or PDF? Yes. When you have filled in the form, press Download and pay once. You get the finished document as a Word file to keep editing and as a PDF to send or print, and the link by email. ### Is what I type sent anywhere? While you fill it in, what you type stays in your browser. When you buy the document, your answers go to nerix to make your files. They are kept for seven days so you can download again, then deleted. ### What should I check before I use this template? This follows widely used current advice: long passwords, a password manager and multi-factor sign-in rather than frequent forced changes. If a law, contract or customer sets other rules for your systems, follow those. ### Are these IT and project templates free? Most are. Fill in and download them for free as Word or PDF, with no account. A few longer documents are premium: free to fill in, paid once to download, and marked with their price. ### Does a security policy make us secure? No document does that alone. A policy helps when it matches what people really do, so keep it short, explain it to your team and review it every year. ### Is a project charter only for large projects? No. A small project benefits too, because one page that names the goal, the limits and the decision maker prevents most arguments later. Templates ## More in IT and projects - [API integration specification Specify how two systems connect: what data moves, how it is secured, how errors are handled and who owns it. IT and projects](https://nerix.ai/templates/api-integration-specification) - [Architecture decision record Record a technical decision with its context, options, reasons and consequences, for the team to find later. IT and projects](https://nerix.ai/templates/architecture-decision-record) - [Bring your own device policy Set the rules for using personal phones and laptops for work: security, privacy, support and leaving. IT and projects](https://nerix.ai/templates/byod-policy) - [Bug report Report a software problem so a developer can repeat it, judge its impact and fix it. IT and projects](https://nerix.ai/templates/bug-report) - [Change management plan Plan how people will be told, trained and supported through a big change, and how you will know it worked. IT and projects](https://nerix.ai/templates/change-management-plan) - [Change request Ask for a change to a project or system, show its impact and record whether it is approved. IT and projects](https://nerix.ai/templates/change-request) [See all IT and projects templates](https://nerix.ai/templates/it-projects) Templates ## More kinds of documents Every category has its own page, so you can see all of its templates at once. ## Use it in nerix ### Use it in nerix - [Templates](https://nerix.ai/product/templates) - [Long tasks](https://nerix.ai/product/tasks) - [Long documents](https://nerix.ai/product/long-documents) ### Learn more - [How to Make a Document From a Template](https://nerix.ai/help/make-a-document-from-a-template) - [IT and projects](https://nerix.ai/templates/it-projects) ## Keep reading - Quality and audits nis2 [Quality and audits](https://nerix.ai/blog/category/quality-and-audits) November 1, 2026 7 min read ### [NIS2 checklist for small companies](https://nerix.ai/blog/nis2-checklist-for-small-companies) A NIS2 checklist for small companies. See if the directive applies, the ten Article 21 security measures and the 24 hour, 72 hour and one month deadlines. Read the guide