ToolypetMCP
intermediate4 minutessecurity

Password Policy Compliance Audit

Audit password policy compliance: generate test passwords at different strengths and verify against policy requirements.

passwordpolicycompliancestrengthaudit

इस रेसिपी का उपयोग कब करें

Test your password policy with various password strengths. Ensure your system correctly rejects weak passwords and accepts strong ones, meeting compliance requirements.

चरण

1

Test weak password

प्रॉम्प्ट:Generate a weak 8-character lowercase-only password for testing
2

Verify weak rejection

प्रॉम्प्ट:Check the weak password — should be rejected by policy
3

Test strong password

प्रॉम्प्ट:Generate a strong 16-character password with all character types
4

Verify strong acceptance

प्रॉम्प्ट:Check the strong password — should pass all policy requirements
5

Demonstrate proper storage

प्रॉम्प्ट:Hash the accepted password with bcrypt to demonstrate proper storage

अक्सर पूछे जाने वाले प्रश्न

What does NIST say about password policies?

NIST 800-63B: minimum 8 characters, no composition rules (no forced special chars), check against breached password lists, no periodic rotation requirements. Focus on length over complexity.

Should I require special characters?

NIST says no — it leads to predictable patterns (P@ssw0rd!). Instead, require minimum length (12+), check against breach databases, and support passphrases.

संबंधित रेसिपी