Advertisement
Enforce Password Complexity
Users that can choose their own complex password tend to gravitate toward something they can remember.
Those passwords may be short, common names or places, and may include their phone number or social
security number. Threat actors have designed and built tools that can run through hundreds of thousands of
names and combinations within minutes to guess passwords. Forcing your employees to have a stronger
password that have additional complex characters will cause the threat actors to take years to attempt to
guess. Common is 8 characters with upper case and numbers. Uncommon would be 12 or more characters
with forced upper case and lower case, numbers, and special characters – as an example.
SonicWall SMA 100 Series
18
Security Best Practice Guide
Advertisement
