How To Safely Store A Password (2010)

Re:How To Safely Store A Password (2010) by moyix on Thursday December 03, 2020 @11:02AM (#25290190)

The problem is really the opposite – too many organizations slavishly follow the pre-2017 NIST guidance!

Per wikipedia:

> From 2004, the “NIST Special Publication 800-63. Appendix A,”[2] advised people to use irregular capitalization, special characters, and at least one numeral. It also recommended changing passwords regularly, at least every 90 days. This was the advice that most systems followed, and was "baked into" a number of standards that businesses needed to follow.

[ Parent | on HN ]

Re:How To Safely Store A Password (2010) by kevinarpe on Thursday December 03, 2020 @09:53PM (#25298376)

I agree. I cannot recall a single corporate password policy in my working life that did not require regular password resets. And now that I think about it, I am surprised that Google does not ask me to reset my password on a regular basis. I guess Google follows the latest NIST advice!

(For other readers: It seems that quote comes from here: https://en.wikipedia.org/wiki/Password_policy)

[ Parent | on HN ]