---
title: Authentication and Password Security Policy
description: Ensure your ClickBid account stays secure with our Authentication & Password Security Policy. Learn password requirements, session rules, and how we protect your data.
---

[Skip to content](https://support.cbo.io/authentication-and-password-security-policy#main-content)

![clickbid\_logo\_22\_left\_0\_margin](https://support.cbo.io/hs-fs/hubfs/clickbid_logo_22_left_0_margin.png?width=200&height=59&name=clickbid_logo_22_left_0_margin.png)

- [Blog](https://blog.cbo.io/)
- [ClickBid Admin](https://cbo.io/admin/login.php)

Open main navigation

Close main navigation

- [Blog](https://blog.cbo.io/)
- [ClickBid Admin](https://cbo.io/admin/login.php)
- [View our Training Videos](https://training.clickbidonline.com/all-courses/)

[View our Training Videos](https://training.clickbidonline.com/all-courses/)

 Welcome to ClickBid's Knowledge Base

- There are no suggestions because the search field is empty.

1. [ClickBid How To Articles](https://support.cbo.io/?hsLang=en)
2. [Account & Setup](https://support.cbo.io/account-setup?hsLang=en)
3. [Users & Logging In](https://support.cbo.io/account-setup?hsLang=en#users-logging-in)

# Authentication and Password Security Policy

### 1**. Selection of Strong Authentication Factors**

1.1. Purpose:

- The purpose of this policy is to ensure that this system and data are protected by strong authentication measures.

1.2. Guidelines:

- Utilizing multi-factor authentication (MFA) is recommended and for some users required.
- Select hard-to-guess passwords that do not contain dictionary words or information about the user, such as the user ID, names of family members, date of birth, etc.

### **2. Protection of Authentication Factors**

2.1. Purpose:

- To safeguard authentication factors from unauthorized access and use.

2.2. Guidelines:

- Authentication factors (e.g., passwords, tokens) must not be shared or disclosed to anyone, including colleagues.
- Users must not write down authentication factors in a manner that compromises security (e.g., on sticky notes) or store them in insecure files.
- Users must be alert to malicious individuals who may try to exploit their passwords (for example, by calling and asking for their password so the caller can “troubleshoot a problem”).
- Passwords must not be inserted in external e-mail messages or other forms of electronic communication.
- Passwords must not be revealed over the phone to anyone.
- Passwords must not be revealed on questionnaires or security forms

### **3. Password/Passphrase Management**

3.1. Purpose:

- To prevent unauthorized access to company systems and data through secure management of passwords/passphrases.

3.2. Guidelines:

- Users must not reuse previously used passwords/passphrases across different systems.
- Passwords/passphrases must meet minimum complexity requirements, including length and character diversity.
- Passwords/passphrases should be changed immediately if there is any suspicion or knowledge that they have been compromised.
- If a password/phrase is suspected compromised, report it immediately via a support request.

### **4. Incident Reporting**

4.1. Purpose:

- To ensure prompt handling and resolution of security incidents related to authentication factors.

4.2. Guidelines:

- Users who suspect their authentication factors have been compromised must report the incident immediately via a support request.
- The report should include details such as when the incident occurred, how it was detected, and any potential impact.
- Upon receiving a report, an investigation will be initiated and appropriate action to mitigate any potential threats taken.

### **5. Compliance and Enforcement**

5.1. Compliance:

- All users accessing this system and data must comply with this policy.

5.2. Enforcement:

- Non-compliance with this policy may result in disciplinary action, up to and including termination of the contract.

### **6. Review and Updates**

6.1. Policy Review:

- This policy shall be reviewed annually or as necessary to ensure it remains current and effective.

6.2. Policy Updates:

- Updates to this policy may be initiated as required to address new security threats or technological advancements.

### **7. Policy Acknowledgement**

7.1. Acknowledgement:

- By using company systems and data, users acknowledge that they have read, understood, and agree to comply with this Authentication and Password Security Policy.

- [Account & Setup](https://support.cbo.io/account-setup?hsLang=en#main-content)

    - [Users & Logging In](https://support.cbo.io/account-setup?hsLang=en#users-logging-in)
    - [Billing/Renewal](https://support.cbo.io/account-setup?hsLang=en#billing-renewal)
    - [Organization Account](https://support.cbo.io/account-setup?hsLang=en#organization-account)
    - [Event Settings](https://support.cbo.io/account-setup?hsLang=en#event-settings)
    - [Auction Settings](https://support.cbo.io/account-setup?hsLang=en#auction-settings)
    - [Welcome Page](https://support.cbo.io/account-setup?hsLang=en#welcome-page)
- [Get Started](https://support.cbo.io/get-started?hsLang=en#main-content)

    - [Pre-Event Prep](https://support.cbo.io/get-started?hsLang=en#pre-event-prep)
    - [Creating a New Event](https://support.cbo.io/get-started?hsLang=en#creating-a-new-event)
- [Event Day Toolkit](https://support.cbo.io/event-day-toolkit?hsLang=en#main-content)

    - [Paddle Raise](https://support.cbo.io/event-day-toolkit?hsLang=en#paddle-raise)
    - [Live Auction](https://support.cbo.io/event-day-toolkit?hsLang=en#live-auction)
    - [Silent Auction](https://support.cbo.io/event-day-toolkit?hsLang=en#silent-auction)
    - [Butler](https://support.cbo.io/event-day-toolkit?hsLang=en#butler)
    - [Volunteer Training](https://support.cbo.io/event-day-toolkit?hsLang=en#volunteer-training)
- [Messaging](https://support.cbo.io/messaging?hsLang=en#main-content)

    - [Text & Emails](https://support.cbo.io/messaging?hsLang=en#text-emails)
    - [Chat Bidders](https://support.cbo.io/messaging?hsLang=en#chat-bidders)
    - [Welcome Text, Text Bidders, & Email Bidders](https://support.cbo.io/messaging?hsLang=en#welcome-text-text-bidders-email-bidders)
- [Tickets & Sponsorships](https://support.cbo.io/tickets-sponsorships?hsLang=en#main-content)

    - [Tickets, Sponsorships & Underwriting Overview](https://support.cbo.io/tickets-sponsorships?hsLang=en#tickets-sponsorships-underwriting-overview)
    - [Reporting & Data](https://support.cbo.io/tickets-sponsorships?hsLang=en#reporting-data)
    - [Manage Ticketed Guests](https://support.cbo.io/tickets-sponsorships?hsLang=en#manage-ticketed-guests)
    - [RSVP & Invoicing](https://support.cbo.io/tickets-sponsorships?hsLang=en#rsvp-invoicing)
- [Items](https://support.cbo.io/items?hsLang=en#main-content)

    - [Items Overview & Setup](https://support.cbo.io/items?hsLang=en#items-overview-setup)
    - [Quantity Items / E-Commerce](https://support.cbo.io/items?hsLang=en#quantity-items-e-commerce)
    - [Item Donation Form and Donors](https://support.cbo.io/items?hsLang=en#item-donation-form-and-donors)
    - [FMV & Tax](https://support.cbo.io/items?hsLang=en#fmv-tax)
- [Peer to Peer and Donation Campaigns](https://support.cbo.io/peer-to-peer-and-donation-campaigns?hsLang=en#main-content)

    - [Peer to Peer and Donation Setup](https://support.cbo.io/peer-to-peer-and-donation-campaigns?hsLang=en#peer-to-peer-and-donation-setup)
    - [Recurring Donations](https://support.cbo.io/peer-to-peer-and-donation-campaigns?hsLang=en#recurring-donations)
    - [Text to Give](https://support.cbo.io/peer-to-peer-and-donation-campaigns?hsLang=en#text-to-give)
    - [Embed Your Donation Form](https://support.cbo.io/peer-to-peer-and-donation-campaigns?hsLang=en#embed-your-donation-form)
    - [Appeal Display](https://support.cbo.io/peer-to-peer-and-donation-campaigns?hsLang=en#appeal-display)
- [Bidders](https://support.cbo.io/bidders?hsLang=en#main-content)

    - [Bidder Setup](https://support.cbo.io/bidders?hsLang=en#bidder-setup)
    - [Donor Thank You Letters](https://support.cbo.io/bidders?hsLang=en#donor-thank-you-letters)
    - [Bidder Registration Custom Questions](https://support.cbo.io/bidders?hsLang=en#bidder-registration-custom-questions)
- [Reporting & Data](https://support.cbo.io/reporting-data?hsLang=en#main-content)

    - [Event Reporting](https://support.cbo.io/reporting-data?hsLang=en#event-reporting)
- [Credit Card Processing & Payments](https://support.cbo.io/credit-card-processing-payments?hsLang=en#main-content)

    - [Credit Card Processing & Payments](https://support.cbo.io/credit-card-processing-payments?hsLang=en#credit-card-processing-payments)
    - [FAQs](https://support.cbo.io/credit-card-processing-payments?hsLang=en#faqs)
    - [Merchant Account & Merchant Report](https://support.cbo.io/credit-card-processing-payments?hsLang=en#merchant-account-merchant-report)
- [Web Content / Event Landing Pages](https://support.cbo.io/web-content-event-landing-pages?hsLang=en#main-content)

    - [Design & Customization](https://support.cbo.io/web-content-event-landing-pages?hsLang=en#design-customization)
    - [Accepting Donations From Your Landing Page](https://support.cbo.io/web-content-event-landing-pages?hsLang=en#accepting-donations-from-your-landing-page)
- [EventStream Video Streaming](https://support.cbo.io/eventstream-video-streaming?hsLang=en#main-content)

    - [Virtual Live Auction and Paddle Raise](https://support.cbo.io/eventstream-video-streaming?hsLang=en#virtual-live-auction-and-paddle-raise)
    - [EventStream FAQ](https://support.cbo.io/eventstream-video-streaming?hsLang=en#eventstream-faq)
- [Integrations + Partners](https://support.cbo.io/integrations-partners?hsLang=en#main-content)

    - [Neon One](https://support.cbo.io/integrations-partners?hsLang=en#neon-one)
    - [Raiser's Edge NXT](https://support.cbo.io/integrations-partners?hsLang=en#raisers-edge-nxt)
    - [Bloomerang](https://support.cbo.io/integrations-partners?hsLang=en#bloomerang)
    - [Salesforce for Nonprofits](https://support.cbo.io/integrations-partners?hsLang=en#salesforce-for-nonprofits)
    - [Charityproud](https://support.cbo.io/integrations-partners?hsLang=en#charityproud)
    - [Classy](https://support.cbo.io/integrations-partners?hsLang=en#classy)
    - [TravelPledge](https://support.cbo.io/integrations-partners?hsLang=en#travelpledge)
    - [Double the Donation](https://support.cbo.io/integrations-partners?hsLang=en#double-the-donation)
    - [HGA Fundraising](https://support.cbo.io/integrations-partners?hsLang=en#hga-fundraising)
    - [Public API](https://support.cbo.io/integrations-partners?hsLang=en#public-api)
    - [Zapier](https://support.cbo.io/integrations-partners?hsLang=en#zapier)
    - [Virtuous](https://support.cbo.io/integrations-partners?hsLang=en#virtuous)
    - [Charity Experiences](https://support.cbo.io/integrations-partners?hsLang=en#charity-experiences)
    - [Donorperfect](https://support.cbo.io/integrations-partners?hsLang=en#donorperfect)
    - [Little Green Light](https://support.cbo.io/integrations-partners?hsLang=en#little-green-light)
- [FAQs](https://support.cbo.io/faqs?hsLang=en#main-content)

    - [FAQs](https://support.cbo.io/faqs?hsLang=en#faqs)

[![CB Logo Blue-1](https://support.cbo.io/hs-fs/hubfs/CB%20Logo%20Blue-1.png?width=400&height=119&name=CB%20Logo%20Blue-1.png "CB Logo Blue-1")](https://try.cbo.io)

ClickBid Training Hub

<https://www.facebook.com/clickbidonline> <https://www.instagram.com/cbo.io/> <https://www.linkedin.com/company/clickbid-llc/> <https://youtube.com/clickbidonline>

Copyright © 2026, ClickBid Event Fundraising