These Articles explain SSProtect Access Control, which includes Password Policies and Two-Factor Authentication.