Glossary: Policies, Standards and Risk Management

NIST SP 800-63B-4

Also written: SP 800-63B-4

NIST's authentication guidance, finalized in July 2025, on which many password standards are based. It calls for long passwords, blocklist checks, no composition rules and no forced changes on a schedule.