57
What is with bad password requirements
(lemmy.blahaj.zone)
An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!
Enjoy!
There are use cases where long passwords could be problematic. 64 would be long enough for most purposes, but short enough not to cause issues for things like microcontrollers.
It should be paired with a strongly recommended larger value, however.
The new NIST recommendations give a recommendation of at least a 64 character maximum.
https://pages.nist.gov/800-63-4/sp800-63b.html#passwordver