Is it possible to check users' passwords to see whether they meet complexity guidelines, whilst the passwords are suitably encrypted?
My employer plans to do this, which has panicked me a bit about how they are storing passwords. Should I be concerned?
They want to check that all passwords are at least 8 chars and a "combination of alphabetic, numeric and symbol characters."
Posted Dec 2, 2012, 3:17 PM UTC · edited
1117