By disallowing consecutive identical characters, or common character types as the first/last character in a password, IT administrators can fight password predictability.ĭisallow consecutive identical charactersĭisallow common characters types as first/last characterĮnd-user communication should be a critical part of your password management tactics. Unfortunately, complexity is ineffective if it is predictable. Password complexity settings are commonly identified as the character types (lower case, upper case, numeric, and special). With Specops Breached Password Protection you can block more than 2 billion leaked passwords, including the haveibeenpwned list. In addition to password dictionaries, Specops Password Policy offers an add-on Breached Password Protection service. For more information about disallowing words with password dictionaries, see our dictionary overview and best practices blog. They also enable you to react to leaked password lists by blocking their usage in your organization. Password dictionaries allow you to block common words related to your organization when setting a password. Comparing Specops Password Policy to FGPP Password dictionaries The below section highlights various password security settings, and how Specops Password Policy compares to FGPP. Specops Password Policy works directly with Group Policy Objects, and enables fine-grain control over password policies to fulfill various security requirements. You can enhance password policy security, without sacrificing true Active Directory integration. Unfortunately, FGPP still lacks a lot of the capabilities for meeting auditor requirements, regulatory standards, and the latest password recommendations from NIST. In the market for a third-party password policy solution? If an audit has revealed poor password practices, you may look to Microsoft Fine-Grained Password Policy (FGPP) for additional flexibility over default domain password settings. Specops Password Policy comparison and price

Specops pricing