Strengthening Active Directory Password Rules Without Frustrating Users

Want to boost your Active Directory password security without driving users crazy? Ditch outdated complexity rules and switch to passphrases - longer, multi-word passwords that are easier to remember and harder for hackers to crack.

https://osintsights.com/strengthening-active-directory-password-rules-without-frustrating-users?utm_source=mastodon&utm_medium=social

#ActiveDirectory #PasswordManagement #Passphrases #IdentitySecurity #Authentication

to be extra secure, consider including a newline, null byte, or bell character in your password or passphrase

#infosec #passwords #passphrases #securityTips

Just had the interesting thought occur to me that I'd like #autocorrect in my passwords and that's not actually insane?

I use #passphrases everywhere and I think everyone should.

Sometimes however, I typo somewhere while typing the dozens of characters; requiring me to type the entire thing again.

However, words are the source of entropy in my passphrases, not their characters.

Therefore, correcting any word that is not on the word list to the closest word that is would not diminish entropy.

It’s concerning how many people try to memorize #passwords like pX#7k!g and believe they’re safe.

That’s just way too few characters, and memorising is already almost impossible.

Instead of passwords, we should use #passphrases. They are easier to remember and, thanks to their greater length, significantly more secure – even if an attacker knows the list of words from which the phrase was constructed.

Passsatz can help with the creation. https://apps.apple.com/ch/app/passsatz/id6698877095