Monterey - Disable Password Hints

Information

Password hints _MUST_ be disabled.

Password hints leak information about passwords that are currently in use and can lead to loss of confidentiality.

Solution

This is implemented by a Configuration Profile.

mobileconfig profile info:

com.apple.loginwindow:
RetriesUntilHint:
0

See Also

https://github.com/usnistgov/macos_security

Item Details

Category: CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

References: 800-53|CM-6b., 800-53|IA-6, CCE|CCE-91067-9, CCI|CCI-000366

Plugin: Unix

Control ID: 34743ec93b8fd03883c1ec31bde5567c2eafa62a4b5bdc6bb665722ee6f45d42