Skip to content

Glossary: Identity and Access Management

NIST SP 800-63B

Also written: NIST SP 800-63B-4, NIST

The US standard for digital identity whose password rules Kettle & Crane follows: at least 15 characters (8 with MFA), no composition rules, no scheduled changes, block breached and company words, and limit guessing.

Where the book teaches it

Related terms

pwqualityMFA (multifactor authentication)breached password listaccount lockout