Google Android 13 must be configured to not allow passwords that include more than four repeating or sequential characters.

An XCCDF Rule

Description

<VulnDiscussion>Password strength is a measure of the effectiveness of a password in resisting guessing and brute force attacks. Passwords that contain repeating or sequential characters are significantly easier to guess than those that do not contain repeating or sequential characters. Therefore, disallowing repeating or sequential characters increases password strength and decreases risk. SFR ID: FMT_SMF_EXT.1.1 #1b</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>

ID: SV-254735r862404_rule
Severity: Medium
References: CCI-000366
Updated: about 1 year ago

Configure the Google Android 13 device to prevent passwords from containing more than four repeating or sequential characters.

On the EMM console:

COBO:
1. Open "Lock screen" settings.
2. Open "Password constraints".
3. Set password quality to "Numeric (Complex)".

COPE:

1. Open "Password constraints".
2. Select "Personal Profile".
3. Set password quality to "Numeric (Complex)".

Note: Alphabetic, Alphanumeric, and Complex are also acceptable selections, but these selections will cause the user to select a complex password, which is not required by the STIG.

Google Android 13 must be configured to not allow passwords that include more than four repeating or sequential characters.

Description

Remediation - Manual Procedure