Another 90 days have come and gone, and then you see an all too familiar security message \u201cIt\u2019s been 90 days since you\u2019ve changed your password\u201d.\u00a0Annoyed, you sigh and go through process of changing your password. While it sounds like you are doing your part to stay secure, that is not quite the case.<\/p>\r\n\r\n\r\n\r\n
For most, when they are required to come up with a new, secure, and memorable password every 90-days, they will typically only change one letter or number of their last one. Sure, this fulfills the bare minimum requirements, but it makes it easy for someone to figure it out. This is because it creates a pattern where someone can guess to go up one number.<\/p>\r\n\r\n\r\n\r\n
As you can see from the list above, anything that is a series of numbers used in order, words, and especially using \u201cPassword\u201d is a terrible way to keep your account secure. Furthermore, if you are using a password like one of the one's listed above only changing one character when required, it is pretty easy to see how someone could guess it.<\/p>\r\n\r\n\r\n\r\n
Before we get into creating the secure password itself, let\u2019s go over some new policy rules to replace the outdated 90-day rule.<\/p>\r\n\r\n\r\n\r\n
While it may seem intimidating to put these rules into place, there are tools to help make this process much easier. For MFA, you can set this up through Office 365. As for the other requirements you can use the PowerShell module,\u00a0DSInternals<\/a>\u00a0which is a collection of tools that can help you secure your Active Directory.<\/p>\r\n\r\n\r\n\r\n Now you are probably thinking, \u201cwell what should my password be after\u00a0of all this?\u201d. It is no secret that using Google\u2019s suggested password is a great strategy for protecting your account. After all, it is a long combination of random characters. However, this is also impossible to remember. Luckily there is a tool for this!<\/p>\r\n\r\n\r\n\r\n Password managers are great for storing all those hard-to-remember but secure passwords for you. Some of our favorite password managers include:<\/p>\r\n\r\n\r\n\r\n Ultimately, this is just a foundation for staying secure. While there are a lot more you can do to further secure your AD, this is a good starting point for you and your company.<\/p>\r\n\r\n\r\n\r\n\r\n