Lightning Talk: Pass(word)/Fail: How to make better password requirements

[xenosf]

Slides

https://docs.google.com/presentation/d/1s-6M9P4EMMUlbIBz-7ByW7QELWmPQ7V3A6Oh4e631Og/edit?usp=sharing

WIIFY

• Make your systems more secure
• Improve user experience for password authentication

Key points

• Improving your password guidelines can boost security and user experience
• Passwords can only be as strong as the ‘weakest’ users
• Good passwords: Size Matters, Don’t Force It, Be Unique, No Hints, Communicate
• Supplement passwords with multi-factor authentication, or consider going passwordless

Impact

• Know: NIST's 2024 guidelines for passwords
• Believe: Good password requirements benefit security and user experience
• Do: Implement recent guidelines and best practices in for your systems' password requirements