All Our Security

Password & Authentication Policy Generator

Professional Edition

1Organization

2Password Rules

3MFA & SSO

4Accounts

5Generate

Organization Details

Basic information for your Password & Authentication Policy.

Company Name

Required

Industry

Required

HIPAA PCI-DSS SOC 2 NIST CSF NIST 800-53 NIST 800-63B ISO 27001 CMMC GDPR FedRAMP None / Other

Define your organization's password standards.

Minimum Password Length

Password Maximum Age (Rotation)

Uppercase letters Lowercase letters Numbers Special characters No dictionary words No personal info Breached password check

Password History (cannot reuse last N)

Account Lockout Threshold

Lockout Duration

Session Timeout (Inactivity)

Configure your MFA and single sign-on requirements.

📱 Authenticator App (TOTP) 🔑 Hardware Security Key (FIDO2/U2F) 🔔 Push Notification 💬 SMS (discouraged) 📧 Email OTP 👆 Biometric 💳 Smart Card / PIV

SSO Provider

e.g., Azure AD / Entra ID, Okta, Google Workspace, Ping Identity, OneLogin

MFA Scope

Define requirements for privileged accounts, service accounts, and password managers.

Privileged Account Requirements

Additional controls for admin, root, domain admin accounts

Service Account Handling

Password Manager Policy

Password Manager Solution

Review your inputs then generate the Password & Authentication Policy.