Password best practices for security - Amazon WorkMail

End of support notice: On March 31, 2027, AWS will end support for Amazon WorkMail. After March 31, 2027, you will no longer be able to access the Amazon WorkMail console or Amazon WorkMail resources. For more information, see Amazon WorkMail end of support.

Password best practices for security

When you use the Amazon WorkMail web or a third-party client to access your mailbox, you must use a password to sign in. As an Amazon WorkMail web client user, under Settings, you can change or update your password. For information on changing the password on the Amazon WorkMail web client, see General settings. You can also ask your system administrator to reset the password using the AWS console.

As part of security best practices, here are some password guidelines recommended by Amazon WorkMail.

  • Set a password that contains a minimum of 8 characters. The password should include uppercase and lowercase characters, numerical digits (0 through 9), and special characters (for example, ~ or !).

  • Use unique passwords across all online accounts. Avoid re-using the same password for multiple accounts.

  • Avoid using common words or phrases related to your username, domain, organization, Amazon WorkMail service, AWS or the account type for which the password applies.

  • Use a password manager to securely store your password.