Here is the text of the NIST sp800-63b Digital Identity Guidelines.

  • cybersandwich@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    1 year ago

    I think if you do allow 8 character passwords the only stipulation is that you check it against known compromised password lists. Again, pretty reasonable.