800-63-3
PwnedPasswordsDLL
| 800-63-3 | PwnedPasswordsDLL | |
|---|---|---|
| 12 | 1 | |
| 699 | 82 | |
| 0.0% | - | |
| 0.0 | 10.0 | |
| over 1 year ago | over 5 years ago | |
| CSS | C++ | |
| GNU General Public License v3.0 or later | - |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
800-63-3
- Is 2FA possible for Chase?
-
I need a regex for a password validation in java
I see you got your regex, but please consider reading the nist guidelines https://pages.nist.gov/800-63-3/ It is an excellent resource in password policies that isn't shared nearly enough.
-
Twitter API hacked, Over 400 million user's database being sold online
Even NIST outright recommends against SMS/phone 2FA.
-
Looking to invest in authentication and verification in the digital world
ID.me is the first NIST 800-63-3 approved company. https://www.businesswire.com/news/home/20180816005147/en/ID.me-Becomes-First-Identity-Provider-to-Be-Approved-as-NIST-800-63-3-Conformant & https://insights.id.me/article/what-are-the-nist-800-63-digital-identity-guidelines/
-
Stupid Security Things
NIST has made a series of sensible guidelines:
https://pages.nist.gov/800-63-3/
They now need to be made enforceable, whether by government requiring them in government contracts, or indirectly by insurers excluding coverage if they are not met.
- Identity Management for WireGuard
-
How do I tell my security team to tone it down with the phishing e-mails?
I just tell our customer's compliance systems and vendors (there's usually a space to explain why you're not doing a given thing) that we'll start rotating passwords as soon as NIST recommends it (again) , and no sooner. Nobody has ever failed a test nor have I even been asked about this stance. Flies right under the radar.
- Password Never Expires Debate
-
New and Improved TSP site up and running?
Several hundred pages if you want to read it all - https://pages.nist.gov/800-63-3/.
- 90-day password-reset policy for "insurance reasons"
PwnedPasswordsDLL
What are some alternatives?
OpenPasswordFilter - An open source custom password filter DLL and userspace service to better protect / control Active Directory domain passwords.
DSInternals - Directory Services Internals (DSInternals) PowerShell Module and Framework
ad-password-protection - Active Directory password filter featuring breached password checking and custom complexity rules
OpenSK - OpenSK is an open-source implementation for security keys written in Rust that supports both FIDO U2F and FIDO2 standards.
VxWireguard-Generator - Utility to generate VXLAN over Wireguard mesh SD-WAN configuration