Time to Evolve: Are Your Password Policies Stuck in the Past?

The National Institute of Standards and Technology (NIST) has updated its cybersecurity framework, advocating for significant changes to password policies. Prioritising password length over complexity, allowing longer passwords (up to 64 characters), and implementing multi-factor authentication (MFA) are key recommendations. The updated guidelines also advise against frequent password changes and blocking breached passwords, while eliminating password hints and security questions. These changes aim to improve password security while reducing user frustration

There are no comments yet.

Please log in to write the first comment.