For more information on using multiple layers of security for your sign-in events, see Your Pa$$word doesn't matter.
You should use additional features like Azure AD Multi-Factor Authentication, not just rely on strong passwords enforced by Azure AD Password Protection. When users change or reset their passwords, these banned password lists are checked to enforce the use of strong passwords. To support your own business and security needs, you can define entries in a custom banned password list. With Azure AD Password Protection, default global banned password lists are automatically applied to all users in an Azure AD tenant.
Azure AD Password Protection detects and blocks known weak passwords and their variants, and can also block additional weak terms that are specific to your organization. You can provide your users with guidance on how to choose passwords, but weak or insecure passwords are often still used. A lot of security guidance recommends that you don't use the same password in multiple places, to make it complex, and to avoid simple passwords like Password123.
0 kommentar(er)
