Idea ID: 2782025

Add ability to do a dictionary search for password changes

Status : Waiting for Votes
Waiting for Votes
See status update history
over 3 years ago
In eDirectory universal password policies you can specify a small set of words in a word list that are not allowed in passwords. For people that have to follow government requirements such as ARS controls this isn't enough. We need to be able to do a "dictionary" check of passwords to verify that they do not contain words. This could be added as an option so that it can be enabled if the performance penalty is acceptable to that company. This is something that anyone who is a government contractor or even a government agency would want as well as anyone that wants the extra level of security it would provide.