JoshC.28148 (Customer) asked a question.
Password Policy - Ban custom list of passwords
Does Okta support banning a customizable list of passwords?
I'm looking for something similar to this Azure AD feature:
- User15851122134349081871 (North Central-Enterprise)
Not customizable out-of-the-box; we've tried to automate this as much as possible. You may already be aware of the Common Password Check feature under Security > Authentication > Password, which checks against our (unpublished) list of ~2000 common passwords. There are also ways to prevent users from using breached passwords.
- sara.prell1.5433806098919912E12 (Regional Customer Success, Northeast)
Hi Tim,
I'm a CSM here at Okta and recently answered this question for a team I partner with. Unfortunately, as Tim stated, we do not allow for a customized list of prohibited passwords at this time.
We do though have a common password list. While the list is case sensitive and requires common passwords to be an exact match, the list does include over 100,000 common passwords – breached passwords, common passwords, and dictionary words.
On a more positive note, I can share that the ability to add a word to the common password list is planned. Here is where you can find the Okta Idea for that enhancement: https://ideas.okta.com/app/#/case/106143?section=requests. I recommend subscribing to it and upvoting it using the “thumbs up.”
Best,
Sara
Expand Post
This question is closed.
Hi Tim,
I'm a CSM here at Okta and recently answered this question for a team I partner with. Unfortunately, as Tim stated, we do not allow for a customized list of prohibited passwords at this time.
We do though have a common password list. While the list is case sensitive and requires common passwords to be an exact match, the list does include over 100,000 common passwords – breached passwords, common passwords, and dictionary words.
On a more positive note, I can share that the ability to add a word to the common password list is planned. Here is where you can find the Okta Idea for that enhancement: https://ideas.okta.com/app/#/case/106143?section=requests. I recommend subscribing to it and upvoting it using the “thumbs up.”
Best,
Sara