{"id":6519,"date":"2017-08-24T13:34:00","date_gmt":"2017-08-24T17:34:00","guid":{"rendered":"http:\/\/irreal.org\/blog\/?p=6519"},"modified":"2017-08-24T13:37:43","modified_gmt":"2017-08-24T17:37:43","slug":"nist-password-guidlines","status":"publish","type":"post","link":"https:\/\/irreal.org\/blog\/?p=6519","title":{"rendered":"Nist Password Guidelines"},"content":{"rendered":"

As most of you probably know, NIST recently updated their password guidelines. The three big changes are: <\/p>\n

    \n
  1. Use long easy to remember passwords. Don’t worry so much about mixing in numbers and special characters.<\/li>\n
  2. Don’t expire your users’ passwords\u2014it only encourages bad password practices.<\/li>\n
  3. For all but low-risk applications, use two-factor authentication.<\/li>\n<\/ol>\n

    The IEEE Spectrum<\/a> has a Q&A with Paul Grassi<\/a>, the author of the new guidelines. It’s a quick and easy read and will give you some valuable guidance as to dealing with your own passwords. He doesn’t mention password managers, which I still believe the be the best solution for generating high-entropy passwords and managing them safely. <\/p>\n

    If you want more information, take a look at the actual guidelines<\/a>. They’re long and detailed and written in bureaucratese but cover all the material. <\/p>\n","protected":false},"excerpt":{"rendered":"

    As most of you probably know, NIST recently updated their password guidelines. The three big changes are: Use long easy to remember passwords. Don’t worry so much about mixing in numbers and special characters. Don’t expire your users’ passwords\u2014it only … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[3],"class_list":["post-6519","post","type-post","status-publish","format-standard","hentry","category-general","tag-security"],"_links":{"self":[{"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/6519","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6519"}],"version-history":[{"count":3,"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/6519\/revisions"}],"predecessor-version":[{"id":6522,"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/6519\/revisions\/6522"}],"wp:attachment":[{"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6519"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6519"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/irreal.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6519"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}