Solid advice by @mooreds.com , anything else nowadays might be a lost effort and people will be forced into bad practices.
Reposted from Dan Moore
Don't make passwords too hard; users will work around any baroque requirements.

Test for length, check for compromise, and encourage (or require, based on your security needs) MFA.

Comments