Detections
Analytics

1.51 WN11-AC-000035

Information

Passwords must, at a minimum, be 14 characters.

GROUP ID: V-253303
RULE ID: SV-253303r1051044

Information systems not protected with strong password schemes (including passwords of minimum length) provide the opportunity for anyone to crack the password, thus gaining access to the system and compromising the device, information, or the local network.

Solution

Configure the policy value for

Computer Configuration >> Windows Settings >> Security Settings >> Account Policies >> Password Policy >> 'Minimum password length'

to '14' characters.

See Also

https://workbench.cisecurity.org/benchmarks/27756

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1), CCI|CCI-000205, CCI|CCI-004066, Rule-ID|SV-253303r1051044_rule, STIG-ID|WN11-AC-000035, Vuln-ID|V-253303

Plugin: Windows

Control ID: 0a1b70203387451929e2533d285bd6fc42800a287d7f9a17d6b8d46b203fdfa1