4 ms·
One simple way to help make sure your employees are selecting good passwords without a mountain of rules is to run your users' password file against a tool like
by LeifCarrotson 7y ago
One simple way to help make sure your employees are selecting good passwords without a mountain of rules is to run your users' password file against a tool like john, perhaps adding details like company name and their personal info to the dictionary. If the password stands up to a few minutes of brute force and dictionary attacks, that by no means makes you secure against hours or days of attacks but does rule out Password1 and the like.
- kerkeslager 7y agoFrankly, this technique is security theater and doesn't deserve mention. As you mentioned, it is a fairly weak defense against dictionary attacks, and it does nothing to prevent possibly the most common attack: users re-using passwords they've used on other sites, and those sites leaking passwords.