The standard recommendation for strong passwords has been a minimum of 12 to 15 characters, including capital and small letters, numbers, and symbols, and periodic changes in passwords. The National Institute for Standards and Technology has recently updated requirements to a minimum of 15 characters, no required complexity, and no periodic changes (only if there has been a compromise). Many law firms, and other businesses and organizations, continue to follow the earlier recommendation.
Passphrases are secure and easier to remember than random passwords. For the new approach, NIST gives “cassette lava baby” as an example. Password managers (like 1Password, Keeper, and Dashlane) can be very helpful to balance security and ease of use.
Passkeys are an emerging technology designed to replace passwords for logging onto networks, apps, services, and websites. They are faster, easier to use, and more secure than passwords.
For more information, click here.
For current NIST recommendations, click here.