How to disallow palindrome passwords using ADSelfService Plus

How to disallow palindrome passwords using ADSelfService Plus

Having a secure password is of paramount importance to ensure the safety of your network. A password's strength depends on the length of the password, the different types of characters used, the number of repeated characters, the sequence of characters, and more.

When users use dictionary words or palindromes (a sequence of characters that reads the same both forward and backward), their passwords are easy to crack. This is why you need to strictly enforce policies that prevent the use of such passwords.

ADSelfService Plus is an identity security solution with multi-factor authentication, single-sign on, and self-service password management capabilities. You can create custom password policies using its Password Policy Enforcer feature and enforce them granularly based on OUs and groups in AD. It also provides the option to prevent users from creating passwords that are palindromes.

To restrict users from creating passwords that are palindromes:

  1. Log in to ADSelfService Plus, and go to Configuration > Self-Service > Password Policy Enforcer.

  2. Select the policy to which you want to apply the password policy enforcer rules.

  3. Check the box next to Enforce Custom Password Policy.

  4. Select Restrict Pattern and check the box next to Disallow palindrome passwords.

  5. Click Save.

Disallow palindrome password

The Password Policy Enforcer also has various options that can prevent users from using dictionary words as passwords; restrict the use of a particular pattern of characters as passwords (example: qwerty, asdf, 1234); and require the use of a preset number of special, unicode, numeric, uppercase, and lower case characters. These options ensure users create strong passwords.

 


                  New to ADSelfService Plus?

                    • Related Articles

                    • Password Policy Enforcer configuration

                      ADSelfService Plus' Password Policy Enforcer empowers administrators to implement advanced password policy controls, such as banning weak passwords and disallowing keyboard sequences, for users' on-premises AD accounts and cloud accounts, including ...
                    • Implement granular password policies for users in the same AD domain

                      When sensitive information needs to be protected, complying with stringent password policies becomes essential. The default AD domain password policy lacks the flexibility to enforce different rules for different users and does not provide sufficient ...
                    • Encryption and data storage in ADSelfService Plus database

                      Encryption in the ADSelfService Plus database ADSelfService Plus' database uses the following encryption methods to store sensitive data: Database Encryption method PostgreSQL AES-256-CBC Microsoft SQL AES-256-CBC The following sensitive information ...
                    • Enforcing password history during password reset

                      In a world reeling under a large number of applications to make our life easier, it is a daunting task to remember the usernames and passwords for each and every application being used. Though administrators force users to change the passwords ...
                    • Modify the password policy requirements text displayed on screen in ADSelfService Plus

                      Description ADSelfService Plus, by default, displays the password policy requirements (domain or fine-grained password policies) of a user in the change password and reset password screen. If you prefer to customize the password policy messages to ...