$ cat resources/password-mfa-policy.md
Free Resource

Password & MFA Policy Template

Built on current NIST guidance — not the outdated 90-day-rotation-and-complexity-rules advice most templates still copy.

What's included

  • Current NIST SP 800-63B-4 password requirements — length over complexity, no mandatory rotation
  • MFA requirements by access type, with guidance on why SMS-only no longer cuts it
  • Privileged and service-account requirements, account lockout rules, and an exceptions process
  • Ready to customize — fill in your organization name and deploy

Get the template

Free — no account required.

View Template →