Department of Defense Password Management Guideline
Abstract
The DoD Password Management Guideline provides a set of good practices directed toward preventing password compromise. Large numbers of ADP systems require identification and authentication of a system user. Of ten, the authentication mechanism implemented is a password--a "symbol" that should be known only by its owner. Since a user's identification is often a compaction of the individual's name and thus easily guessed, the password must provide the requisite protection. Measures suggested for password protection include: a. Use of machine-generated pronounceable passwords (pass-phrases). b. Maximum length of time for password retention. c. Capability to change a password. d. Personal password protection (e.g., not written down).
Document Details
- Document Type
- Technical Report
- Publication Date
- Apr 12, 1985
- Accession Number
- ADA425705
Entities
Organizations
- United States Department of Defense