Educause Security Discussion mailing list archives

Re: Password policy


From: Kevin Shalla <kshalla () UIC EDU>
Date: Wed, 1 Nov 2006 13:07:28 -0600

No password expirations, yes strong password policy.

At 12:12 PM 11/1/2006, you wrote:
A couple questions:

   * Do most enforce password expirations?  I came from a large
corporation and they enforced a 90 day password expiration
policy.  It seemed to have the effect of making passwords less
secure as most would write them down in obvious places.
   * Do most enforce a strong password policy?
   * Any other recommendations/insights along this line would be helpful.

Current thread: