[PDF] Do This Not That

The DoD Password Management Guideline provides a set of good practices directed toward preventing password compromise.

Use a strong password, pattern, or biometric authentication; enable the screen lock; and use a password manager. Regularly review and update security settings ...

We have three requirements for making passwords that reduce security risks: use a password manager, use unique passwords, and use stronger passwords.

The password vault provides online protected storage for system level passwords and accounts. Passwords are organized by program, function and capability.

Get a password manager program to help you remember your passwords. A good manager will encrypt and automatically update stored passwords ...

Use a password manager to create and manage strong passwords. ... Use a password manager to help you generate strong passwords and keep them securely stored.

What are DoD password requirements? For systems that don't have MFA, the Department of Defense (DoD) requires passwords to be a minimum of 15 characters long.

We use Keeper FedRAMP. Its the only FedRAMP password manager as far as I know. They seem to have the best security certifications across the board.

DoD requirements include a 15-character minimum with unique characters, which can result in lengthy, hard-to-remember passwords.

You can store CUI system credentials in password managers to help protect CUI covered systems for DFARS 7012, NIST 800-171, and CMMC compliance.