Common Passwords

A password can be long and still be easy to guess. For example, passwordpassword has sixteen characters, but it is a choice an attacker is likely to try. These familiar choices are called common passwords.

Lumen can tell you whether an account uses a password from its common-password list without showing you the password itself. For example:

seclab people lee

Look for these lines:

  password: 16 characters, on the common list

The words 'on the common list' tell you that Lee's password needs replacing, even though it is sixteen characters long. First, prevent common passwords from being chosen again:

seclab policy set block-common on

You should see:

Policy updated: block-common is on.

This rule applies to new passwords. It does not change Lee's existing password, so reset his password after turning on the rule:

seclab reset lee

You should see:

Password reset for lee. Every session they had is signed out.