Dex Password & Security Requirements - FAQ

To protect account access and sensitive payment data, Dex enforces strict password and account security standards. All users are required to comply with the following rules.

• Recovering Your Dex Password : Support Portal
• Reset Password in Virtual Terminal : Support Portal

All Dex passwords must meet every requirement listed below:

• Minimum 14 characters

• At least 1 lowercase letter (a–z)

• At least 1 uppercase letter (A–Z)

• At least 1 special character from the following list:
  ! @ # $ % ^ &

• Must not match your username

• Must not contain three consecutive identical characters
  (e.g., 111, aaa, @@@)

• Must be different from your previous five passwords

For security and compliance reasons, user credentials must never be:

• Shared with other users

• Stored on computers or workstations

• Written down or stored in physical documents

If you believe your password may have been compromised, you must change it immediately.

Dex applies the following security controls to prevent unauthorized access:

• Login Error Threshold:

  • After 5 unsuccessful login attempts, the account is locked for 15 minutes

• Password History (Lookback):

  • Dex checks the previous 5 passwords

  • Password history is retained for 300 days

• Password Expiration:

  • Passwords must be reset every 60 days

• Registration Invitation Expiration:

  • Dex registration links expire after 8 days

• Inactive User Revocation:

  • User access is revoked after 90 days of inactivity

• Use a password manager or secure password generator

• Change your password immediately if suspicious activity is detected

• Log out after each session, especially on shared or public devices