Comment Comment by eckesicle NIST best practice recommendations state:* Require more than 8 characters* Don't require special characters* Don't force the user to reset their password* Do check for compromised passwords* Require MFA* ...All very sensible.https://auth0.com/blog/dont-pass-on-the-new-nist-password-gu... parent eckesicle 5 years ago
* Require more than 8 characters
* Don't require special characters
* Don't force the user to reset their password
* Do check for compromised passwords
* Require MFA
* ...
All very sensible.
https://auth0.com/blog/dont-pass-on-the-new-nist-password-gu...