NIST SP 800-63B Guidelines
Description: The current federal password guideline, published in July 2025. It drops forced periodic rotation, sets a 15-character minimum for passwords used on their own (8 when combined with multi-factor authentication), and requires screening new passwords against breach lists.
Subcategory: Best Practices & Standards
License: public-domain