Educause Security Discussion mailing list archives

Re: Passphrases v Password


From: randy <marchany () VT EDU>
Date: Fri, 5 Jul 2013 14:57:17 -0400

How do you enforce "passphrases"? :-)

Our current password rules are at
http://www.awareness.security.vt.edu/passwords/strong_passwords.html.
It will be interesting to see the user reaction to the 16 character minimum
requirement.

-r.

On Fri, Jul 5, 2013 at 12:22 PM, Cathy Hubbs <hubbs () american edu> wrote:

Greetings,
American University is moving to require passphrases, 16 character
minimum, with upper and lower case requirement for standard users (staff,
students, and faculty).

I would love to hear from anyone that has gone down this path and
experiences from their customers.

Thanks

Cathy

Cathy Hubbs, CISSP, CISA, CGEIT
Chief Information Security Officer
Office of Information Technology
American University




Current thread: