Security News > 2022 > November > Password Salting to Increase Windows Active Directory Security
Password salting is a technique for making passwords more difficult to crack by adding random values to the stored password hash.
In order to understand password salting and its benefits however, it is necessary to understand how Windows stores passwords and some of the risks that are associated with storing passwords in that way.
The problem with password hashes is that they can make it easier for an attacker to figure out a user's password.
This not only means enforcing password complexity requirements, but also preventing users from choosing passwords that are susceptible to dictionary attacks that password salting would ordinarily prevent.
Specops Password Policy actively compares user's passwords to this database to see if the user is using a compromised password, and then forces a password change if necessary.
You can test out Specops Password Policy in your Active Directory with a free trial, anytime.
News URL
Related news
- WinRAR flaw bypasses Windows Mark of the Web security alerts (source)
- Microsoft: Windows 'inetpub' folder created by security fix, don’t delete (source)
- Microsoft: New Windows updates fix Active Directory policy issues (source)
- Don't delete that mystery empty folder. Windows put it there as a security fix (source)
- Windows "inetpub" security fix can be abused to block future updates (source)
- M365 apps on Windows 10 to get security fixes into 2028 (source)