New password guidelines say everything we thought about passwords is wrong

4/19/2017

Passwords are controversial. They are convenient and unpleasant, secure and dangerous at the same time, depending on situation and level of user knowledge.

Discussion about the new security features and future of password authentication in my essay published by VentureBeat.

1 Comment

CBZ

4/20/2017 05:35:28 pm

Thank you for writing this essay, I hadn't seen news of it elsewhere. It's great to see NIST guidance that will, hopefully, move us away from not-necessarily-helpful requirements like uppercase and lowercase letters + numbers + special characters.

Were the complexity requirements put in place to prevent dictionary attacks?

Should password requirements instead encourage longer password length in addition to 2FA? I unfortunately still see user registration apps that limit passwords to 14 characters or less.

Author of books Crypto Basics, Bitcoin for Nonmathematicians, Hacking Point of Sale

New password guidelines say everything we thought about passwords is wrong

Leave a Reply.

Categories

Archives