Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The macOS system must require passwords contain a minimum of one lowercase character and one uppercase character.
Description
Discussion Text
The macOS be configured to require at least one lowercase character and one uppercase character be used when a password is created.
This rule enforces password complexity by requiring users to set passwords that are less vulnerable to malicious users.
Note: The guidance for password-based authentication in NIST 800-53 (Rev 5) and NIST 800-63B state that complexity rules should be organizationally defined. The values defined are based on common complexity values, but an organization may define its own password complexity rules.
Note: The configuration profile generated must be installed from an MDM server.
Satisfies: SRG-OS-000069-GPOS-00037,SRG-OS-000070-GPOS-00038
This rule enforces password complexity by requiring users to set passwords that are less vulnerable to malicious users.
Note: The guidance for password-based authentication in NIST 800-53 (Rev 5) and NIST 800-63B state that complexity rules should be organizationally defined. The values defined are based on common complexity values, but an organization may define its own password complexity rules.
Note: The configuration profile generated must be installed from an MDM server.
Satisfies: SRG-OS-000069-GPOS-00037,SRG-OS-000070-GPOS-00038
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.