Skip to main content
Information Security

Return to Question

Notice removed Reward existing answer by Joseph Sible-Reinstate Monica
Bounty Ended with dlsso's answer chosen by Joseph Sible-Reinstate Monica
Notice added Reward existing answer by Joseph Sible-Reinstate Monica
Bounty Started worth 100 reputation by Joseph Sible-Reinstate Monica
Notice removed Reward existing answer by Gloweye
Bounty Ended with dlsso's answer chosen by Gloweye
Question Protected by Rory Alsop♦
Removed from Network Questions by Rory Alsop♦
Tweeted twitter.com/StackSecurity/status/1147112912420577280
Notice added Reward existing answer by Gloweye
Bounty Started worth 50 reputation by Gloweye
Mod Moved Comments To Chat
Became Hot Network Question
edited tags; edited title
Link
Anders
Anders
  • 65.8k
  • 25
  • 185
  • 225

Check, How do I check that password policy is not violatedusers don't write down their passwords?

Improved language.
Source Link
edit approved Jul 3, 2019 at 9:09
undo
edit approved Jul 3, 2019 at 9:09
undo
  • 2.2k
  • 2
  • 14
  • 18

I havehave a password policy, in which said,states that users must not write and store their passwords shouldn't be storeddown in plain textplaintext. How can i check it? If there instrument, which checks,I ensure that user doesn't store passwordsthey haven't done so by writing their password in emails, scripts / sends in via mail etc, documents or files?

I have password policy, in which said, that passwords shouldn't be stored in plain text. How can i check it? If there instrument, which checks, that user doesn't store passwords in scripts / sends in via mail etc

I have a password policy which states that users must not write and store their passwords down in plaintext. How can I ensure that they haven't done so by writing their password in emails, scripts, documents or files?

Source Link
Vladimir
Vladimir
  • 445
  • 1
  • 4
  • 6

Check, that password policy is not violated

I have password policy, in which said, that passwords shouldn't be stored in plain text. How can i check it? If there instrument, which checks, that user doesn't store passwords in scripts / sends in via mail etc