The NIST 800-63b password guidelines outline new password policy change recommendations that includes eliminating the forced periodic password reset. Microsoft and NIST both recommend against forced monthly or quarterly password resets… why? This whitepaper considers the evolution of password expiration policies and offers insight into an optimal approach an organization should take to follow the NIST password guidelines.
Topics covered include: Password Reset Effectiveness and Side-Effects. Two Steps for Following the NIST Guidelines. The Optimal Approach. The Benefits of this Approach. This whitepaper is provided by:
|