Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-98153

Password aging, expiry, and rotation for improved password management

XMLWordPrintable

    • 0
    • 23
    • We collect Confluence feedback from various sources, and we evaluate what we've collected when planning our product roadmap. To understand how this piece of feedback will be reviewed, see our Implementation of New Features Policy.

      Problem

      Modern companies require advanced password management features, part of this was shipped in Confluence 9.1 with a password strength management policy.

      However, advanced password management functionality can also include Password aging and expiry (although according to NIST SP 800-63B this is not currently a recommendation).

      Solution

      Implement password expiry periods to enforce rotation.

          Form Name

            [CONFSERVER-98153] Password aging, expiry, and rotation for improved password management

            Jeremy R made changes -
            Labels Original: admin admin-console affects-server dmb-legacy-jac-none no-cvss-required not-80 security shouldBePrivate New: admin admin-console affects-server dmb-legacy-jac-none no-cvss-required not-80 security
            Security Original: Reporter and Atlassian Staff [ 10751 ]
            Zaro made changes -
            Labels Original: admin admin-console affects-server dmb-legacy-jac-none no-cvss-required not-80 security New: admin admin-console affects-server dmb-legacy-jac-none no-cvss-required not-80 security shouldBePrivate
            Security New: Reporter and Atlassian Staff [ 10751 ]
            SET Analytics Bot made changes -
            UIS Original: 46 New: 0
            Michael Andreacchio made changes -
            Summary Original: Password aging and expiry for improved password management New: Password aging, expiry, and rotation for improved password management
            Michael Andreacchio made changes -
            Summary Original: Password expiry within password management New: Password aging and expiry for improved password management
            Michael Andreacchio made changes -
            Description Original: {panel:bgColor=#e7f4fa}
              *NOTE:* This suggestion is for *Confluence Server*. Using *Confluence Cloud*? [See the corresponding suggestion|http://jira.atlassian.com/browse/CONFCLOUD-11496].
              {panel}

            Modern companies require advanced password management. This includes:

            - Password aging: Automatically invalidating a password after a certain period of time,
            - Password strength check: Making sure that the passwords that are used are strong
              (an example can be found here: http://passwordstrength.net/)

            Two features that are getting more common every day.

            		New: h2. *Problem*

            Modern companies require advanced password management features, part of this was shipped in Confluence 9.1 with a [password strength management policy|https://confluence.atlassian.com/doc/manage-password-strength-1442846691.html].

            However, advanced password management functionality can also include Password aging and expiry ([although according to NIST SP 800-63B this is not currently a recommendation|https://pages.nist.gov/800-63-3/sp800-63b.html#-5112-memorized-secret-verifiers]).
            h2. *Solution*

            Implement password expiry periods to enforce rotation.
            Michael Andreacchio made changes -
            Remote Link New: This issue links to "JRADEV-21005 (JDOG - JIRA Team Dogfood)" [ 952822 ]
            Michael Andreacchio made changes -
            Remote Link New: This issue links to "Page (Pug - Confluence Dogfood)" [ 952821 ]
            Michael Andreacchio made changes -
            Remote Link New: This issue links to "Page (Pug - Confluence Dogfood)" [ 952820 ]
            Michael Andreacchio made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 952819 ]

              Unassigned Unassigned
              fb239a42de73 Erik Erik
              Votes:
              2 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated: