Password Complexity
1. Require a minimum length: At least 8 characters is generally recommended.
2. Include a mix of character types:
- Should contain at least one digit.
- Should contain at least one special character.
- Should contain at least one uppercase character.
3. Avoid easily guessable patterns: Prohibit common patterns like "password," "123456," or sequential characters (e.g., "abcd1234").
4. Do not allow dictionary words or commonly used phrases.
5. Consider using a password strength meter to guide users in creating strong passwords.
Password protection standards
The user ID and password should be different. Keep passwords to yourself and do not tell anyone, even assistants or secretaries. All passwords are confidential and sensitive information.
1. Avoid revealing a password over the phone to anyone.
2. Never share a password in an email message.
3. Don't discuss a password in front of others, maintaining its confidentiality.
4. Don't provide hints about the format of a password, such as using personal information like "my family name."
5. Don't reveal a password on questionnaires or security forms.
6. Avoid sharing a password with family members.
7. Don't reveal a password to a co-worker, even while on vacation.
8. Refrain from using the "Remember Password" feature of applications to prevent unauthorized access.
9. Don't write passwords down and store them anywhere in your office.
10. Avoid storing passwords in a file on ANY computer system without proper encryption.