Web Security · Junior · Question 60 of 75
What does modern guidance (for example NIST) say about password rules?
- 1Limit passwords to 8 characters so users remember them
- ✓Correct answer: Prefer longer passwords, allow all characters and check against breached lists instead of complex composition rules
- 3Require at least one emoji and change the password monthly
Explanation
Rules like "one digit, one symbol" lead to predictable patterns. Length and blocking known leaked passwords are more effective.