Export the list of users with the password length

I have a requirement to export the list of users with the number of characters in the password. I need to this list to implement the latest password requirements in my company.

Parents
  • ProjectWise supports 3 user account types. For 2 of them, Windows & Identity accounts, ProjectWise doesn't store the password at all. For logical accounts the passwords should be stored as hashes, not even encrypted, a proper hash can't be reversed and so you can't tell how long the password is.

    It's considered an information disclosure security issue if you could tell how long a password was, so what your asking would be bad in any authentication system. The way to ensure passwords are of a certain length is to enforce that when the password is set, not try and check afterwards.

     

Reply
  • ProjectWise supports 3 user account types. For 2 of them, Windows & Identity accounts, ProjectWise doesn't store the password at all. For logical accounts the passwords should be stored as hashes, not even encrypted, a proper hash can't be reversed and so you can't tell how long the password is.

    It's considered an information disclosure security issue if you could tell how long a password was, so what your asking would be bad in any authentication system. The way to ensure passwords are of a certain length is to enforce that when the password is set, not try and check afterwards.

     

Children