57
What is with bad password requirements
(lemmy.blahaj.zone)
An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!
Enjoy!
There needs to be a law to forbid passwords not providing 64 character max
Why stop there? 128 or 256 sound much nicer. Actually, while you’re at it, 4096 should be enough to fit a short story.
There are use cases where long passwords could be problematic. 64 would be long enough for most purposes, but short enough not to cause issues for things like microcontrollers.
It should be paired with a strongly recommended larger value, however.
The new NIST recommendations give a recommendation of at least a 64 character maximum.
https://pages.nist.gov/800-63-4/sp800-63b.html#passwordver