Understanding PCI DSS 4.0: Payment Security Requirements

As part of ongoing Payment Card Industry Data Security Standard (PCI DSS) version 4.0 compliance requirements, we’re introducing a small change to help your admin users improve the security of your Raisely account.

What is the change?

All Raisely admin user passwords must meet a minimum length of 12 characters. You will be prompted to update your password whenever you log in to your Raisely account to ensure compliance.

When does it apply?

All admins will be required to update their password from 31st March 2025. Reset it now to avoid any interruptions to your access.

Why is this change happening?

For organisations using Raisely, this change will continue our work in reducing the risk of data breaches, fraud, and cybersecurity threats. PCI DSS compliance ensures we’re always meeting industry standards for your donors to feel safe when donating to your campaign.

What is the PCI DSS and why is it important?

The Payment Card Industry Data Security Standard (PCI DSS) is a global standard with many specific requirements to protect payment data. PCI DSS v4.0 is the next evolution of the standard which continues to ensure the security of vendors like Raisely and it’s customers (charities and nonprofits) when processing payments.

Your payment processor(s) like Stripe and Paypal will also need to be PCI compliant and meet these requirements.

How do I update my password?

Simply reset your password prior to logging in. If you are already logged in, head to your personal account settings in your left panel (click on your account name). This should allow you to reset your password whilst logged in. Make sure your new password is more than 12 characters long.

FAQs

### accordion

## expand

# Will this affect me if I am using Google Login?

No, there's no change for logging in via Google Login.

## expand

# Will this affect my fundraisers who have already signed up to my campaign?

No. This change only applies to admin users who are listed as your team members.

## expand

# What if my organisation uses SAML SSO to log in to Raisely?

We’d recommend you reach out to your IT team or identity provider to request they enforce 12-character passwords for all admins to ensure they are compliant.

## expand

# What will happen on the 31st March once the changes are required?

If you try to log in with a password less than 12 characters long, you will be redirected to the password reset page to update your password.

## expand

### accordion

Tips for Creating Strong Passwords

Use at least 12 characters, but 14 or more is better.
Use a combination of uppercase and lowercase letters.
Create a passphrase that is unique and uses words that don’t ordinarily go together.
Make your passphrase unpredictable by using spaces and punctuation.
Shorten each word, then add special characters and numbers.

Examples of Strong Passwords

Random string: `cXmnZK65rf*&DaaD` or `Yuc8$RikA34%ZoPPao98t`
Memorable phrase: "HorsePurpleHatRun" or "6MonkeysRLooking^"
Unique passphrase: "red house sky train", "sleep free hard idea", or "crystal onion clay pretzel"