Re:I hate password rules
by beermonster on Tuesday November 16, 2021 @04:28PM
(#29246555)
You’ve read it correctly.
The idea is to mitigate against brute force by account lockout/disable following N failed attempts rather than enforcing greater password length or complexity requirements.
The idea is to mitigate against brute force by account lockout/disable following N failed attempts rather than enforcing greater password length or complexity requirements.