From the course: ISC2 Certified Information Systems Security Professional (CISSP) (2024) Cert Prep

Unlock this course with a free trial

Join today to access over 24,000 courses taught by industry experts.

Password policies

Password policies

From the course: ISC2 Certified Information Systems Security Professional (CISSP) (2024) Cert Prep

Start my 1-month free trial Buy for my team

Password policies

“

- [Instructor] Passwords are among the most common authentication mechanisms, and it's important to ensure that passwords remain secure. Administrators may use group policy objects to securely configure passwords to require good password practices by end users. Some password requirements exist to make sure that passwords are difficult to guess and resistant to brute force attacks. The first of these is a password length requirement. Best practice says that passwords should be at least eight characters long, although some organizations require even longer passwords. The second requirement that makes passwords complex and difficult to guess is requiring that they include different types of characters such as uppercase characters, lowercase characters, digits, and symbols. Now, one important note, best practice is changing in this area. The most recent guidance from NIST suggests that users should be allowed to use a variety of complex characters in their passwords, but that this should…

Contents