NIST Drops Password Complexity, Mandatory Reset Rules

Image source: Vitalii Vodolazskyi via Shutterstock. Article by Edge Editors. Dark Reading – September 25, 2024.

The National Institute of Standards and Technology (NIST) is no longer recommending using a mixture of character types in passwords or regularly changing passwords. NIST’s second public draft version of its password guidelines (SP 800-63-4) outlines technical requirements as well as recommended best practices for password management and authentication. […]

Click here to view original web page at www.darkreading.com