Please do not use !?_ or your License Plate Number: Analyzing Password Policies in
summary
Survey of 83 German companies collects employee-facing authentication methods and extracts 64 password composition policies; distribution via the BSI newsletter targets the person responsible for authentication. Most policies require three character classes and enforce short complex passwords rather than minimum-strength checks; 33 companies set minimum length 8 and 22 enforce a 90-day rotation, with the single most common policy appearing in 7 policies. High heterogeneity appears — at most 7 identical across the main elements — and 30 policies include password history 3–24.
AI-written summary · about
chapters (7)
- 0:00Start
- 0:31Recommendations
- 1:14Passwordless
- 1:53Authentication (n=68)
- 2:28Password Policies - Diversity
- 4:01Further Topics
- 4:12Next steps
related talks
31mBreaking Bad (Passwords)
27mThe Wide Diversity of Password Requirements – And how to cope with it
25mEverything You Know About Passwords Is Wrong
10mPassword policies of most top websites fail to follow best practices
23mImplementing "password never expires"
23mFantastic Passwords and Where to Find Them
11mEvolution of Password Expiry in Companies: Measuring the Adoption of Recommendations...
01h 05mPasswords are not going away