Defining password policies

Password policy

A password policy sets certain standards for passwords, such as password complexity and the rules for changing passwords. A password policy minimizes the inherent risk of using passwords by ensuring that they meet adequate complexity standards to thwart brute force attacks. When you change password attributes frequently enough, you mitigate the risk of someone revealing or discovering them.