Ready to leave password chaos behind? In this episode of SysAdmin Weekly, Andy and Eric break down the latest National Institute of Standards and Technology (NIST) password and identity-guideline updates and what they mean for you as a SysAdmin.
We cover:
- What changed and why (goodbye “special characters just because”)
- How to align your org with SP 800-63’s new structure and expectations
- Real-world tactics: from passkeys and token theft to legacy systems refusing to die
Also in this episode: bonus snark, smart home horror stories, PKI headaches, and identity as the new firewall
Whether you’re revamping your password policy or finally ready to ditch the “rotate every 90 days” mindset, this one’s for you.
Episode Resources
- SysAdmin Weekly companion newsletter
- NIST Digital Identity Guidelines (SP 800-63 suite)
- NIST SP 800-63B “Authentication & Authenticator Management”