Detections
Analytics

1.158 WN11-CC-000260

Information

Windows 11 must be configured to require a minimum pin length of six characters or greater.

GROUP ID: V-253401
RULE ID: SV-253401r991589

Windows allows the use of PINs as well as biometrics for authentication without sending a password to a network or website where it could be compromised. Longer minimum PIN lengths increase the available combinations an attacker would have to attempt. Shorter minimum length significantly reduces the strength.

Solution

Configure the policy value for

Computer Configuration >> Administrative Templates >> System >> PIN Complexity >> 'Minimum PIN length'

to '6' or greater.

See Also

https://workbench.cisecurity.org/benchmarks/27756

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-253401r991589_rule, STIG-ID|WN11-CC-000260, Vuln-ID|V-253401

Plugin: Windows

Control ID: bec282640b8a3bd45c22e191378f97fc635015d47e01ff817addeb749f143993