nFront Password Filter Features
Password Policy Settings
Listed below are all the granular setting that nFront Password Filter has the ability to control. Pick one, or pick them all.
- Minimum password length (set min of 15 char for Domain Admins to
thwart Rainbow Table password cracking)
- Maximum number of characters in each password (useful for mainframe limitations)
- *Maximum password age
- **Reject new passwords that match old passwords by more than X
characters
- Check to see if the password contains 0,1,2,3, or 4 of the following character types
- Uppercase
- Lowercase
- Numeric
- Non-Alphanumeric
- Minimum / Maximum Numeric Characters in password
- Minimum / Maximum Upper Case Characters in password
- Minimum / Maximum Lower Case Characters in password
- Minimum / Maximum Alpha Characters in password
- Minimum / Maximum Non Alpha Numeric Characters
(e.g. !,@,#,$,%,^, etc.) in password
- Minimum / Maximum Space in password (require spaces to encourage
use of passphrases)
- Reject passwords that contain vowels (a,e,i,o,u,y)
- Check to see if password contains username
- Check to see if password contains any part of user's full name
- Check to see if password contains 2 consecutive identical characters
- Disallow passwords that begin or end with a numeric character
- Disallow passwords that begin or end with a special character
- Force the password to contain a numeric character in a specific position
- Force the password to contain a non-alphanumeric character in a specific position
- Perform the dictionary check looking for a case-insensitive exact match or a case-insensitive substring match
- ***Check to see if password matches a customizable plain-text
dictionary
* Requires install of nFront Password Expiration Service on one
Domain Controller
** Only supported if the password change is sourced from our
workstation client or from our
nFront Web Password Change product
*** You can edit the dictionary in Notepad. nFront Password
Filter can scan over 2 million words in less than 1 second.