Password Analysis

Test your passwords and policies

How strong - or weak - are your passwords? Let us test your passwords in the company, so you get both insight and recommendations on how to improve your passwords and security. Duration: 2 days.

Value

  • Get an overview of the actual quality of passwords that are being used across the environment and across the different account types – regular users, administrators and service accounts

  • Get insights into password length, strength, complexity and the most common passwords used. This demonstrates the actual security level and may provide input for content of upcoming awareness campaigns and/or password policy changes

  • Get concrete recommendations for enhancing the password quality in the environment

Product

The deliverable of the analysis is a written report containing the following:

  • A non-technical section with an Executive Summary for management and decision makers

  • A technical section including detailed observations, statistics and tangible recommendations

Method

The password analysis is performed on extracts of your Active Directory database. We will initially spend up to a day cracking the database using very high performing equipment. Afterwards we will analyse the output using various specialized tools.

Data will be kept in an isolated and dedicated environment at itm8 to ensure the confidentiality of data. Likewise, the report will also be encrypted using strong encryption. Data will be permanently destroyed after the final version of our report has been delivered.