aligent/magento2-pci-4-compatibility

Provide compatibility with PCI DSS 4.0 requirements

1.1.0 2025-01-07 00:14 UTC

Requires

• php: ^8.1.0|^8.2.0|^8.3.0

MIT

README

A Magento 2 module to bring it in-line with the PCI DSS 4.0 requirements, with changes including:

• Automatic disabling of admin accounts with 90 days of inactivity.
  • Functionality added via new cron job that runs once per day.
• Restriction of admin session timeout to be no more than 15 minutes.
• Restriction of admin lockout functionality:
  • No more than 10 attempts before lockout.
  • Lockout duration of no less than 30 minutes.
• Enforce than admin passwords must contain at least 12 characters.

Installation

composer require aligent/magento2-pci-4-compatibility
bin/magento module:enable Aligent_Pci4Compatibility
bin/magento setup:upgrade