A few weeks ago, I mentioned a contest that InfoWorld columnist Roger Grimes was having to prove that long passwords are just as good or better than complex passwords. Today, in a vacation edition of ...

NIST’s latest password guidelines focus less on length and complexity of secrets and more on other measures such as 2FA, throttling, and blacklists. A comment period has closed on NIST’s new password ...

New research has brought something significant to light. Passwords of the length and complexity deemed compliant by regulatory bodies are found everywhere within breached lists. Relying on compliant ...

We all use passwords. We use them for our phones, our computers, our e-mail, and just about every other kind of personal account. Unfortunately, many of us use simple passwords, such as “Password1” or ...

As ransomware attacks continue to wreak havoc on organizations worldwide, many official standards and regulations have been established to address this pressing issue. This article examines the common ...

Both modern Windows systems (e.g., Windows Server 2008 and 2008 R2) and Active Directory, like Linux and Solaris systems, allow you to configure password policies that determine how long and complex ...