Windows 10: Can you implement somehow my best guess would be GPO a list of pawned password for the GP...

My idea would be to download the HIBP hashes db and configure a policy for when a user is resetting his password to check the hash if it is in the list.I wonder if that would be possible directly through AD/GP?

:)

 

Pawned Passwords

Have I Been Pwned: Pwned Passwords


I may be naive but was not aware that the HIBP website also has a method to check passwords.

Came to my attention today when I had to reset a password and was informed by the site the new password was on a list of compromised passwords. The new password was not the most simple but lacked capital letters, special characters, etc.

The site was Favor, the food delivery service.

Just a reminder and point of interest. Thoughts ?

 

Pawned Passwords

Thank you for the reminder, Csun.

As for thoughts, you wrote it well..."The new password was not the most simple but lacked capital letters, special characters, etc."

Use complex passwords. *Wink

...and change them periodically,

 

Forgot PC login and Bitlocker Passwords

*Doh I found the password when I went back to my password list to implement Bree's suggestion!
Apologies for uneccessary post - although I wouldn't have found it had you guys not given me hope with your replies! *Party