Skip to main content
Mav.next enforces a few baseline rules on every account to protect your team’s data. They apply anywhere a password is set — signup, teammate invitations, and password reset — and to every sign-in attempt.

​
Password requirements

Any new or updated password must:
  • Be at least 8 characters long
  • Include at least one uppercase letter
  • Include at least one lowercase letter
  • Include at least one number
These rules run whenever a password is set or changed. Accounts created before these rules were introduced can keep signing in with their existing password, but the next time they change it — including via Forgot your password? — the new password has to meet the requirements above.
A password like Password1 meets the minimum rules, but longer, less predictable passphrases (for example, correct-horse-battery-9) are much stronger. Use a password manager where you can.

​
Login lockout

To slow down brute-force attempts, Mav.next locks an account after too many failed sign-ins:
  • 5 consecutive failed login attempts locks the account
  • The lock lasts 30 minutes
  • While locked, sign-in is refused even with the correct password
  • A successful sign-in — or waiting out the 30-minute window — resets the counter
If you enter the wrong password a few times, stop and confirm you’re using the right one before trying again; each miss counts toward the lockout.

​
If a teammate is locked out

If someone on your team can’t sign in and thinks they may have hit the limit, they have two options:
1

Wait 30 minutes

The lockout clears automatically. After the window has passed, the next sign-in attempt with the correct password will work.
2

Reset the password

From the sign-in page, use Forgot your password? to receive a reset link by email. Setting a new password (which must meet the requirements above) unlocks the account immediately.
Admins can’t clear another user’s lockout from Settings — the fastest fix is a password reset by the affected teammate.