Re:Building a Password Cracker in 2024
by EE84M3i on Saturday January 27, 2024 @08:02AM
(#39155181)
NIST says:
> “Verifiers SHOULD NOT require memorized secrets to be changed arbitrarily (e.g., periodically). However, verifiers SHALL force a change if there is evidence of compromise of the authenticator.”
They also don't recommend having rules about like, a certain number of symbols, etc.
> “Verifiers SHOULD NOT require memorized secrets to be changed arbitrarily (e.g., periodically). However, verifiers SHALL force a change if there is evidence of compromise of the authenticator.”
They also don't recommend having rules about like, a certain number of symbols, etc.
https://pages.nist.gov/800-63-FAQ/#q-b05