Browse Definitions :

BACKGROUND IMAGE: iSTOCK/GETTY IMAGES

This content is part of the Essential Guide: How to prepare for the emerging threats to your systems and data
Definition

password blacklist

Contributor(s): Matthew Haughn

A password blacklist is a list of words disallowed as user passwords due to their commonplace use.

Blacklists may also incorporate rules to prevent the use of common passwords with frequently-used modifications such as capital letters, standard substitutions or numbers following the words. These rules can help protect against password cracking software that works with dictionaries of commonly-used passwords – which also often include the ability to apply frequently-used modifications.

Such blacklists can prevent the use of a string of characters that might pass password entropy checks. For example, PassW0rd1 is rated as an acceptably strong password in many password strength meters because it employs several password hardening measures, but in fact, it’s quite weak: It’s just the word password (the weakest and most common password of all) with common modifications.  

This was last updated in January 2014

Continue Reading About password blacklist

Join the conversation

1 comment

Send me notifications when other members comment.

Please create a username to comment.

Check out www.passwordrbl.com

This is a Password Blacklist service that can be subscribed to. It contains millions of bad passwords discovered through honeypots, hacktools, and data breaches.
Cancel

-ADS BY GOOGLE

File Extensions and File Formats

Powered by:

SearchCompliance

SearchSecurity

  • time-based one-time password (TOTP)

    A time-based one-time password (TOTP) is a temporary code, generated by an algorithm, for use in authenticating access to ...

  • Security Operations Center (SOC)

    A security operations center (SOC) is a command center facility for a team of IT professionals with expertise in information ...

  • incident response team

    An incident response team is a group of IT professionals in charge of preparing for and reacting to any type of organizational ...

SearchHealthIT

SearchDisasterRecovery

  • disaster recovery team

    A disaster recovery team is a group of individuals focused on planning, implementing, maintaining, auditing and testing an ...

  • cloud insurance

    Cloud insurance is any type of financial or data protection obtained by a cloud service provider. 

  • business continuity software

    Business continuity software is an application or suite designed to make business continuity planning/business continuity ...

SearchStorage

  • storage class memory (SCM)

    Storage class memory (SCM) is a type of NAND flash that includes a power source to ensure that data won't be lost due to a system...

  • Hadoop as a service (HaaS)

    Hadoop as a service (HaaS), also known as Hadoop in the cloud, is a big data analytics framework that stores and analyzes data in...

  • blockchain storage

    Blockchain storage is a way of saving data in a decentralized network which utilizes the unused hard disk space of users across ...

Close