Glossary: MFA, Access Control and Passwords

blocklist

Also written: breached-password blocklist

A list of passwords a system refuses because they are breached, common, predictable or specific to the service. Kettle & Crane's includes "kettle", "coffee" and "passwordpassword".

Where the book teaches it

Chapter 3: Access Management and Access Reviews
Chapter 4: Passkeys, Password Managers and Length
Chapter 5: Complexity, Reuse, Expiration and Age
Chapter 6: What's next

Related terms

password length password complexity credential stuffing