NIST SP 800-63B
- Name
- NIST SP 800-63B
- Publisher
- NIST
- Type
- Identity guidance
- What it is
Guidance on authentication and authenticator management, including password and MFA practices.
- Key points
- Favor length over composition rules
- Screen against breached passwords
- No routine forced changes without evidence of compromise
- On the exam
Breached-password checks, phishing-resistant authentication.