The operating system must prevent the use of dictionary words for passwords.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-203778	SRG-OS-000480-GPOS-00225	SV-203778r991587_rule		Medium

Description

If the operating system allows the user to select passwords based on dictionary words, then this increases the chances of password compromise by increasing the opportunity for successful guesses and brute-force attacks.

STIG	Date
General Purpose Operating System Security Requirements Guide	2024-12-04

Details

Check Text (C-3903r375725_chk)

Verify the operating system prevents the use of dictionary words for passwords. If it does not, this is a finding.

Fix Text (F-3903r375726_fix)

Configure the operating system to prevent the use of dictionary words for passwords.