Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Authentication topic
No spam. Unsubscribe anytime.
Board hears authentication update: city uses long passwords and is adopting FIDO keys
Summary
IT staff told the board the city's minimum password length is currently 16 characters and that with the adoption of FIDO keys staff are not required to change passwords on a fixed schedule.
Board members pressed staff on authentication standards and password policy during the IT policy review.
Greg Viness said the city's minimum password length is above common minimums: "we're currently at 16," and noted that the city has moved away from forced periodic password changes in favor of hardware authentication where available. "With the advent of Fido keys, we do not we do not have them change passwords anymore," he said.
Members discussed the balance between usability and security and acknowledged that stronger authentication steps will be part of the policy alignment to CIS controls. Staff said they would document current practices and include recommended changes in the forthcoming policy drafts.
