Re: Password policy

[Colleen Keller <ckeller () EDUCAUSE EDU>]

Hi Brian
 
You may want to take a look at the EDUCAUSE Resource Center, in
particular, the page on "Password Policies".
http://www.educause.edu/Browse/645?PARENT_ID=616
 
Please let me know if you have any questions, thank you. 

Colleen Keller    
Information Specialist                      
EDUCAUSE, 4772 Walnut Street, Suite 206 
Boulder, CO 80301-2538 
Phone (303) 939-0309, FAX (303) 440-0461 www.educause.edu
<http://www.educause.edu/>  


________________________________

From: Kellogg, Brian D. [mailto:bkellogg () SBU EDU] 
Sent: Wednesday, November 01, 2006 11:13 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Password policy



A couple questions:

 

1.      Do most enforce password expirations?  I came from a large
corporation and they enforced a 90 day password expiration policy.  It
seemed to have the effect of making passwords less secure as most would
write them down in obvious places. 
2.      Do most enforce a strong password policy? 
3.      Any other recommendations/insights along this line would be
helpful. 

 

 

 

Thanks,

 

Brian