Jump to content

Password policies

This is a list of the effective password policies for the user groups defined in this wiki.

GroupPolicies
Account creators
(ᥔᥥᥢᥲ ᥛᥣᥭᥴ ᥚᥧᥱ ᥕᥧᥒᥱ ᥓᥬᥳ ᥖᥪᥰ)
  • Password must be at least 8 characters long (MinimalPasswordLength)
  • Password cannot be a substring within the username (PasswordCannotBeSubstringInUsername) (suggest change on login)
  • Password cannot match a specific list of default passwords (PasswordCannotMatchDefaults) (suggest change on login)
  • Password must be less than 4,096 characters long (MaximalPasswordLength) (suggest change on login)
  • Password cannot be in the list of 100,000 most commonly used passwords. (PasswordNotInCommonList) (suggest change on login)
  • Password policy for mitigation of known attacks where disclosure of details would impede the mitigation (BlockAttacker)
ᥚᥧᥱ ᥓᥬᥳ ᥖᥪᥰ ᥓᥫᥰ ᥘᥥᥳ ᥘᥩᥢᥰ ᥖᥨᥝ ᥞᥒᥰ ᥐᥩᥭᥰ
  • Password must be at least 8 characters long (MinimalPasswordLength)
  • Password cannot be a substring within the username (PasswordCannotBeSubstringInUsername) (suggest change on login)
  • Password cannot match a specific list of default passwords (PasswordCannotMatchDefaults) (suggest change on login)
  • Password must be less than 4,096 characters long (MaximalPasswordLength) (suggest change on login)
  • Password cannot be in the list of 100,000 most commonly used passwords. (PasswordNotInCommonList) (suggest change on login)
  • Password policy for mitigation of known attacks where disclosure of details would impede the mitigation (BlockAttacker)
ᥙᥩᥖᥳ
(ᥔᥥᥢᥲ ᥛᥣᥭᥴ ᥚᥧᥱ ᥕᥧᥒᥱ ᥓᥬᥳ ᥖᥪᥰ)
  • Password must be at least 10 characters long (MinimalPasswordLength)
  • Password cannot be a substring within the username (PasswordCannotBeSubstringInUsername) (suggest change on login)
  • Password cannot match a specific list of default passwords (PasswordCannotMatchDefaults) (suggest change on login)
  • Password must be less than 4,096 characters long (MaximalPasswordLength) (suggest change on login)
  • Password cannot be in the list of 100,000 most commonly used passwords. (PasswordNotInCommonList) (suggest change on login)
  • Password policy for mitigation of known attacks where disclosure of details would impede the mitigation (BlockAttacker)
  • Password must be at least 1 character long to be able to login (MinimumPasswordLengthToLogin)
ᥓᥝᥲ ᥘᥣᥲ ᥖᥤ ᥑᥝᥴ
(ᥔᥥᥢᥲ ᥛᥣᥭᥴ ᥚᥧᥱ ᥕᥧᥒᥱ ᥓᥬᥳ ᥖᥪᥰ)
  • Password must be at least 10 characters long (MinimalPasswordLength) (suggest change on login, must change on login)
  • Password cannot be a substring within the username (PasswordCannotBeSubstringInUsername) (suggest change on login)
  • Password cannot match a specific list of default passwords (PasswordCannotMatchDefaults) (suggest change on login)
  • Password must be less than 4,096 characters long (MaximalPasswordLength) (suggest change on login)
  • Password cannot be in the list of 100,000 most commonly used passwords. (PasswordNotInCommonList) (suggest change on login)
  • Password policy for mitigation of known attacks where disclosure of details would impede the mitigation (BlockAttacker)
  • Password must be at least 1 character long to be able to login (MinimumPasswordLengthToLogin)
Check users
(ᥔᥥᥢᥲ ᥛᥣᥭᥴ ᥚᥧᥱ ᥕᥧᥒᥱ ᥓᥬᥳ ᥖᥪᥰ)
  • Password must be at least 10 characters long (MinimalPasswordLength) (suggest change on login, must change on login)
  • Password cannot be a substring within the username (PasswordCannotBeSubstringInUsername) (suggest change on login)
  • Password cannot match a specific list of default passwords (PasswordCannotMatchDefaults) (suggest change on login)
  • Password must be less than 4,096 characters long (MaximalPasswordLength) (suggest change on login)
  • Password cannot be in the list of 100,000 most commonly used passwords. (PasswordNotInCommonList) (suggest change on login)
  • Password policy for mitigation of known attacks where disclosure of details would impede the mitigation (BlockAttacker)
  • Password must be at least 1 character long to be able to login (MinimumPasswordLengthToLogin)
Temporary account IP viewers
(ᥔᥥᥢᥲ ᥛᥣᥭᥴ ᥚᥧᥱ ᥕᥧᥒᥱ ᥓᥬᥳ ᥖᥪᥰ)
  • Password must be at least 8 characters long (MinimalPasswordLength)
  • Password cannot be a substring within the username (PasswordCannotBeSubstringInUsername) (suggest change on login)
  • Password cannot match a specific list of default passwords (PasswordCannotMatchDefaults) (suggest change on login)
  • Password must be less than 4,096 characters long (MaximalPasswordLength) (suggest change on login)
  • Password cannot be in the list of 100,000 most commonly used passwords. (PasswordNotInCommonList) (suggest change on login)
  • Password policy for mitigation of known attacks where disclosure of details would impede the mitigation (BlockAttacker)
Confirmed users
(ᥔᥥᥢᥲ ᥛᥣᥭᥴ ᥚᥧᥱ ᥕᥧᥒᥱ ᥓᥬᥳ ᥖᥪᥰ)
  • Password must be at least 8 characters long (MinimalPasswordLength)
  • Password cannot be a substring within the username (PasswordCannotBeSubstringInUsername) (suggest change on login)
  • Password cannot match a specific list of default passwords (PasswordCannotMatchDefaults) (suggest change on login)
  • Password must be less than 4,096 characters long (MaximalPasswordLength) (suggest change on login)
  • Password cannot be in the list of 100,000 most commonly used passwords. (PasswordNotInCommonList) (suggest change on login)
  • Password policy for mitigation of known attacks where disclosure of details would impede the mitigation (BlockAttacker)
Importers
(ᥔᥥᥢᥲ ᥛᥣᥭᥴ ᥚᥧᥱ ᥕᥧᥒᥱ ᥓᥬᥳ ᥖᥪᥰ)
  • Password must be at least 10 characters long (MinimalPasswordLength) (suggest change on login, must change on login)
  • Password cannot be a substring within the username (PasswordCannotBeSubstringInUsername) (suggest change on login)
  • Password cannot match a specific list of default passwords (PasswordCannotMatchDefaults) (suggest change on login)
  • Password must be less than 4,096 characters long (MaximalPasswordLength) (suggest change on login)
  • Password cannot be in the list of 100,000 most commonly used passwords. (PasswordNotInCommonList) (suggest change on login)
  • Password policy for mitigation of known attacks where disclosure of details would impede the mitigation (BlockAttacker)
  • Password must be at least 1 character long to be able to login (MinimumPasswordLengthToLogin)
ᥚᥧᥱ ᥐᥧᥛᥰ ᥐᥛ ᥚᥣᥒᥴ ᥞᥣᥒ
(ᥔᥥᥢᥲ ᥛᥣᥭᥴ ᥚᥧᥱ ᥕᥧᥒᥱ ᥓᥬᥳ ᥖᥪᥰ)
  • Password must be at least 10 characters long (MinimalPasswordLength) (suggest change on login, must change on login)
  • Password cannot be a substring within the username (PasswordCannotBeSubstringInUsername) (suggest change on login)
  • Password cannot match a specific list of default passwords (PasswordCannotMatchDefaults) (suggest change on login)
  • Password must be less than 4,096 characters long (MaximalPasswordLength) (suggest change on login)
  • Password cannot be in the list of 100,000 most commonly used passwords. (PasswordNotInCommonList) (suggest change on login)
  • Password policy for mitigation of known attacks where disclosure of details would impede the mitigation (BlockAttacker)
  • Password must be at least 1 character long to be able to login (MinimumPasswordLengthToLogin)
IP block exemptions
(ᥔᥥᥢᥲ ᥛᥣᥭᥴ ᥚᥧᥱ ᥕᥧᥒᥱ ᥓᥬᥳ ᥖᥪᥰ)
  • Password must be at least 8 characters long (MinimalPasswordLength)
  • Password cannot be a substring within the username (PasswordCannotBeSubstringInUsername) (suggest change on login)
  • Password cannot match a specific list of default passwords (PasswordCannotMatchDefaults) (suggest change on login)
  • Password must be less than 4,096 characters long (MaximalPasswordLength) (suggest change on login)
  • Password cannot be in the list of 100,000 most commonly used passwords. (PasswordNotInCommonList) (suggest change on login)
  • Password policy for mitigation of known attacks where disclosure of details would impede the mitigation (BlockAttacker)
Users blocked from the IP Information tool
(ᥔᥥᥢᥲ ᥛᥣᥭᥴ ᥚᥧᥱ ᥕᥧᥒᥱ ᥓᥬᥳ ᥖᥪᥰ)
  • Password must be at least 8 characters long (MinimalPasswordLength)
  • Password cannot be a substring within the username (PasswordCannotBeSubstringInUsername) (suggest change on login)
  • Password cannot match a specific list of default passwords (PasswordCannotMatchDefaults) (suggest change on login)
  • Password must be less than 4,096 characters long (MaximalPasswordLength) (suggest change on login)
  • Password cannot be in the list of 100,000 most commonly used passwords. (PasswordNotInCommonList) (suggest change on login)
  • Password policy for mitigation of known attacks where disclosure of details would impede the mitigation (BlockAttacker)
Stewards
(ᥔᥥᥢᥲ ᥛᥣᥭᥴ ᥚᥧᥱ ᥕᥧᥒᥱ ᥓᥬᥳ ᥖᥪᥰ)
  • Password must be at least 8 characters long (MinimalPasswordLength)
  • Password cannot be a substring within the username (PasswordCannotBeSubstringInUsername) (suggest change on login)
  • Password cannot match a specific list of default passwords (PasswordCannotMatchDefaults) (suggest change on login)
  • Password must be less than 4,096 characters long (MaximalPasswordLength) (suggest change on login)
  • Password cannot be in the list of 100,000 most commonly used passwords. (PasswordNotInCommonList) (suggest change on login)
  • Password policy for mitigation of known attacks where disclosure of details would impede the mitigation (BlockAttacker)
ᥚᥧᥱ ᥖᥥᥐᥱ ᥖᥥᥒ ᥑᥝᥴ
(ᥔᥥᥢᥲ ᥛᥣᥭᥴ ᥚᥧᥱ ᥕᥧᥒᥱ ᥓᥬᥳ ᥖᥪᥰ)
  • Password must be at least 10 characters long (MinimalPasswordLength) (suggest change on login, must change on login)
  • Password cannot be a substring within the username (PasswordCannotBeSubstringInUsername) (suggest change on login)
  • Password cannot match a specific list of default passwords (PasswordCannotMatchDefaults) (suggest change on login)
  • Password must be less than 4,096 characters long (MaximalPasswordLength) (suggest change on login)
  • Password cannot be in the list of 100,000 most commonly used passwords. (PasswordNotInCommonList) (suggest change on login)
  • Password policy for mitigation of known attacks where disclosure of details would impede the mitigation (BlockAttacker)
  • Password must be at least 1 character long to be able to login (MinimumPasswordLengthToLogin)
ᥚᥧᥱ ᥐᥧᥛᥰ ᥐᥣᥢ ᥑᥝᥴ
(ᥔᥥᥢᥲ ᥛᥣᥭᥴ ᥚᥧᥱ ᥕᥧᥒᥱ ᥓᥬᥳ ᥖᥪᥰ)
  • Password must be at least 10 characters long (MinimalPasswordLength) (suggest change on login, must change on login)
  • Password cannot be a substring within the username (PasswordCannotBeSubstringInUsername) (suggest change on login)
  • Password cannot match a specific list of default passwords (PasswordCannotMatchDefaults) (suggest change on login)
  • Password must be less than 4,096 characters long (MaximalPasswordLength) (suggest change on login)
  • Password cannot be in the list of 100,000 most commonly used passwords. (PasswordNotInCommonList) (suggest change on login)
  • Password policy for mitigation of known attacks where disclosure of details would impede the mitigation (BlockAttacker)
  • Password must be at least 1 character long to be able to login (MinimumPasswordLengthToLogin)
Transwiki importers
(ᥔᥥᥢᥲ ᥛᥣᥭᥴ ᥚᥧᥱ ᥕᥧᥒᥱ ᥓᥬᥳ ᥖᥪᥰ)
  • Password must be at least 10 characters long (MinimalPasswordLength) (suggest change on login, must change on login)
  • Password cannot be a substring within the username (PasswordCannotBeSubstringInUsername) (suggest change on login)
  • Password cannot match a specific list of default passwords (PasswordCannotMatchDefaults) (suggest change on login)
  • Password must be less than 4,096 characters long (MaximalPasswordLength) (suggest change on login)
  • Password cannot be in the list of 100,000 most commonly used passwords. (PasswordNotInCommonList) (suggest change on login)
  • Password policy for mitigation of known attacks where disclosure of details would impede the mitigation (BlockAttacker)
  • Password must be at least 1 character long to be able to login (MinimumPasswordLengthToLogin)
ᥚᥧᥱ ᥓᥬᥳ ᥖᥪᥰ
(ᥔᥥᥢᥲ ᥛᥣᥭᥴ ᥚᥧᥱ ᥕᥧᥒᥱ ᥓᥬᥳ ᥖᥪᥰ)
  • Password must be at least 8 characters long (MinimalPasswordLength)
  • Password cannot be a substring within the username (PasswordCannotBeSubstringInUsername) (suggest change on login)
  • Password cannot match a specific list of default passwords (PasswordCannotMatchDefaults) (suggest change on login)
  • Password must be less than 4,096 characters long (MaximalPasswordLength) (suggest change on login)
  • Password cannot be in the list of 100,000 most commonly used passwords. (PasswordNotInCommonList) (suggest change on login)
  • Password policy for mitigation of known attacks where disclosure of details would impede the mitigation (BlockAttacker)
ᥟᥝ ᥑᥪᥢᥰ ᥛᥣᥰ ᥖᥤ "https://tdd.wikipedia.org/wiki/ᥑᥪᥐ_ᥖᥩᥢᥰ:PasswordPolicies"