Editing Linux:Desktop Tips (section)

==== Password strength - my personal advice ====

* settings#1*
** maximum password age: 90 days
** minimum password age: 0 days
:: <pre>$ chage -m 0 -M 90 -I 0 -W 14 <username></pre>

* settings#2*
** minimum password length: 8 characters
** password must meet complexity requirements: enabled (at least 1 capital letter, 2 lower case letters, 1 digit and 1 symbol)
** enforce password history: 10 passwords remembered
:: <syntaxhighlight lang="bash">$ sudo vim /etc/pam.d/common-password</syntaxhighlight>
:: <syntaxhighlight lang="bash">password requisite
pam_cracklib.so minlen=8 difok=3 retry=5 ucredit=-1 lcredit=-2
dcredit=-1 ocredit=-1
password
[success=1 default =ignore]
pam_unix.so obscure sha512 remember=10</syntaxhighlight>

* settings#3*
** account lockout duration: 2 minutes
** account lockout threshold: 6 invalid login attempts
** reset account lockout after: 2 minutes
:: <pre>$ sudo vim /etc/pam.d/common-auth</pre>
:: <syntaxhighlight lang="bash"> auth
required
pam_tally2.so file=/ var /log/tallylog deny=6 unlock_time=120 </syntaxhighlight>
:: *) filenames are Debian Linux specific, I'll add the Fedora paths/files asap