Detections
Analytics

WN11-AC-000035 - Passwords must, at a minimum, be 14 characters.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Information systems not protected with strong password schemes (including passwords of minimum length) provide the opportunity for anyone to crack the password, thus gaining access to the system and compromising the device, information, or the local network.

Solution

Configure the policy value for Computer Configuration >> Windows Settings >> Security Settings >> Account Policies >> Password Policy >> 'Minimum password length' to '14' characters.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_11_V2R8_STIG.zip

Item Details

References: CAT|II, CCI|CCI-000205, CCI|CCI-004066, Rule-ID|SV-253303r1051044_rule, STIG-ID|WN11-AC-000035, Vuln-ID|V-253303

Plugin: Windows

Control ID: fa689ed4f5751276351fac2a2e69b9fac1baf61d5bc9c32789da29c1ad9ddd30