---
id: 4218
title: "Password Security: The Good, the Bad, and the \"Never Should Have Happened\""
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/password-security"
published_at: "2018-08-16T00:00:00Z"
tags: ["authentication", "best-practices", "nist", "guide", "security-policy", "password-security"]
phying_url: "https://phying.com/item/4218"
lang: en
---

# Password Security: The Good, the Bad, and the "Never Should Have Happened"

## Summary

Bishop Fox's password security guide: why mandatory complexity and 90-day rotation fail, what NIST 800-63B now recommends, and common attack techniques like spraying and cracking.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2018-08-16T00:00:00Z
- **Original:** https://bishopfox.com/blog/password-security
- **Phying News:** https://phying.com/item/4218