r/AskNetsec•
[deleted]

Is it possible to check users' passwords to see whether they meet complexity guidelines, whilst the passwords are suitably encrypted?

My employer plans to do this, which has panicked me a bit about how they are storing passwords. Should I be concerned?

They want to check that all passwords are at least 8 chars and a "combination of alphabetic, numeric and symbol characters."

Posted Dec 2, 2012, 3:17 PM UTC · edited

1117
Loading comments…