diff --git a/src/pages/about.njk b/src/pages/about.njk index 7aab4170..34ff0934 100644 --- a/src/pages/about.njk +++ b/src/pages/about.njk @@ -52,6 +52,37 @@ permalink: "/about/"

+
+
What makes a good password policy?
+
+

+ The + current NIST guidelines for passwords + state: +

+ +
    +
  1. Longer passwords (>=8 characters)
    + but recommend even longer ones (passphrases with +64 characters)
    2. +
  2. Don't require password complexity
    + like caps, special chars, etc., instead disallow bad + or blacklisted passwords like "password" or + "123456" by making use of + +
    3. +
  3. Avoid mandatory password changes
    + except in cases of suspected compromise.
    4. +
  4. Allow copy-paste
    + to facilitate the use of password managers.
    5. +
  5. Use two-factor authentication (2FA)
    + or multi-factor authentication (MFA), especially for high-value accounts. +
    6. +
+
+
I found a password rule that I think is dumb. Can I add it to this list?