[PDF] password policy

How do you create a password policy?

To create a custom password policy, you use the Active Directory Administrative Tools from a domain-joined VM. The Active Directory Administrative Center lets you view, edit, and create resources in a managed domain, including OUs.

What are the benefits of a password policy?

A password policy allows you to set a definite tone for how people create and use passwords on your web application. While you may not be able to control users' activities 100%, it enables you to guide them for their own safety. Why Is a Password Policy Important? Cybersecurity is a buzzword in information technology.

What are the password policy recommendations?

The most important password requirement you should put on your users when creating passwords is to ban the use of common passwords to reduce your organization's susceptibility to brute force password attacks. Common user passwords include: abcdefg, password, monkey.

What should you never do with your password?

By default, passwords are set to never expire for your organization. Current research strongly indicates that mandated password changes do more harm than good. They drive users to choose weaker passwords, re-use passwords, or update old passwords in ways that are easily guessed by hackers.