Security Basics mailing list archives

Password Quality checker


From: Johnny Wong <johnnywkm () gmail com>
Date: Sun, 24 Dec 2006 11:02:13 +0800

Hello all,

I was wondering if your organization deploys any password quality checking tool to help users select policy-compliant passwords? Be it web-based or client based. I am thinking what type of requirements do you use to select such tools, and what are the examples out there?

My thoughts:
1) It should not store the user's passwords (be it pass or fail)
2) It should be able to handle complexity rules (or align with Windows GPO)
3) It should also work with Unix/Linux passwords

Thanks,
JW


Current thread: