Educause Security Discussion mailing list archives

Password hints


From: "Stewart, Ian" <istewart () UMASSP EDU>
Date: Fri, 12 Dec 2008 16:26:00 -0500

Does anyone have advice for what sort of questions might be allowable or
wise to use for password challenge-response in the event someone forgets
their password? I think recent guidelines have ruled out using your
mother's maiden name and other old standards.

How have you handled this at your campus?

 

Thanks, Ian


Current thread: