Password Definition Standards

This post discusses about policies, standards or guidelines to establish secure passwords in an IT system.

List of Password Definition Standards

List of password generation standards:

• NIST 800-63B
• SANS SPT Password Protection Policy
• DAT-NT-001/ANSSI/SDE/NP

NIST 800-63B

NIST 800-63B is titled “Digital Identity Guidelines“.

Official web

SANS SPT Password Protection Policy

SANS Institute issues Secury Policy Templates (SPT) for different common policies

There is one called Password Protection Policy, that defines the guidelines and best practices for the creation of strong passwords.

There is another one called Password Construction Guidelines, that defines the guidelines and best practices for the creation of strong passwords

Official web

DAT-NT-001/ANSSI/SDE/NP

The document with title “Recommandations relatives à l’authentification multifacteur et aux mots de passe” is coded as DAT-NT-001/ANSSI/SDE/NP. It is issued by ANSSI, and it is written in French.

Official web

Password Definition in OSs

To set password definitions in Windows system through a GPO in Microsoft Endpoint Configuration Management, please check this external link.