Password policy enforcement software ensures end users use strong passwords across an organization’s systems. Organizations use password policy enforcement software to require their end users create passwords that meet company password policy restrictions, such as password complexity; if the passwords contain symbols, numbers, and upper- and lowercase letters; meet character minimums or maximums; do not contain commonly used words, phrases, or passwords; and do not contain company-specified blacklisted words or passwords from known hacking dictionaries. IT administrators use these tools on top of their existing directory software or service to prevent end users from creating weak passwords, thereby reducing the risk of brute-force attacks, also known as dictionary hacks, from cyber criminals.
To qualify for inclusion in the Password Policy Enforcement category, a product must:
Enforce password policies and complexity rules
Check passwords against blacklists or dictionary hacks
Connect with an organization’s directory software or service