Nist Password Guidelines 2024 Length Requirements. Nist now recommends a minimum password length of 8 characters, with a strong preference for even longer passwords. Online attacks where the attacker attempts to log in by guessing the password can be mitigated by limiting the rate of login attempts permitted.
This document provides technical requirements for remote user authentication at three assurance levels. Here are the most important password practices you should adopt to align with new nist guidelines and bolster your cybersecurity strategy.