Monterey - Disable Password Hints

Information

Password hints _MUST_ be disabled.

Password hints leak information about passwords that are currently in use and can lead to loss of confidentiality.

Solution

This is implemented by a Configuration Profile.

mobileconfig profile info:

com.apple.loginwindow:
RetriesUntilHint:
0

See Also

https://github.com/usnistgov/macos_security

Item Details

Category: CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

References: 800-53|CM-6b., 800-53|IA-6, CCE|CCE-91067-9, CCI|CCI-000366

Plugin: Unix

Control ID: db0db6ad562cde5a45aac1fa8be17f2179e2161a5c9a492e3cd58ee5254717c7