Password Policies
The user ID/password combination is by far the most common means of controlling access to applications, websites, and computer systems. The average user may have a dozen or more user ID and password combinations between school, work, and personal use. To help users select a good, difficult-to-guess password, most organizations implement and enforce a password policy, which typically has the following components:
- Password construction How many characters a password should have, the use of capitalization/numbers/special characters, not basing the password on a dictionary word, not basing the password on personal information, not making the password a slight modification of an existing password, and so on
- Reuse restrictions Whether ...
Get CompTIA Security+ All-in-One Exam Guide (Exam SY0-301), 3rd Edition, 3rd Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
