Control Plane sign-in

Enterprise authentication with Firestore operator mapping (control_plane_users).

Password requirements (new / rotated passwords)

At least 12 characters
Includes uppercase A–Z, lowercase a–z, a digit, and a special character (!@#$%^&*…)
Not a commonly used or breached password pattern (blocked list rejected server-side)

Enable Google Cloud “Have I Been Pwned” / breached password checks in Firebase for defense in depth (see admin manual).