Passwords form the basis of almost all security infrastructures. Invariably numerous problems exist with a company's passwords and virtually all of them stem from poorly developed, implemented, and enforced password policies. Enterprises must do a better job with their password policy.
Ensuring that the following areas are addressed in the policy and that they are clearly communicated will stimulate those improvements:
- Password construction.
- Password expiry.
- Password reuse.
Passwords are the preeminent tool used by companies to verify the identity of the users of their systems and data. The fact that password infrastructure is free and readily understood means it's not about to be replaced. Thus, getting the most out of it through improved policies is important to all companies, regardless of size or complexity.