skills.rest
JayRHa
JayRHaCOMMUNITY
Explore all skills by this author →
Website𝕏@jannik_reinhardGitHub

secure-password-policy

Create NIST SP 800-63B-aligned password policies and audit authentication flows.

3|2|Updated Jun 9, 2026
Search Tags:#authentication#audit#mfa#nist-800-63b#password-policy#breach-screening#kdf
One-click install
npx skills add https://github.com/JayRHa/AgentSkills --skill secure-password-policy
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: secure-password-policy
Source: https://github.com/JayRHa/AgentSkills/tree/main/secure-password-policy
Command: npx skills add https://github.com/JayRHa/AgentSkills --skill secure-password-policy

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps teams define modern authentication and password policies that align with NIST SP 800-63B, replacing unreliable complexity rules and reducing breach risk.

Core Features & Use Cases

  • Define minimum length, breach screening, flexible character sets, and MFA guidance for various AAL levels.
  • Translate policy into engineering requirements (KDF selection, rate limiting, token security) and audit sign-in flows for compliance.
  • Use cases include drafting policy documents, evaluating existing systems, and guiding password-storage configurations.

Quick Start

To get started, ask the skill to draft a NIST-aligned password policy for your organization.

Frequently Asked Questions about secure-password-policy

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create a NIST 800-63B aligned password policy?▼

This skill translates NIST SP 800-63B password policy into engineering requirements by specifying Argon2id for password storage hashing, configuring rate limiting, and securing tokens. It bridges compliance documents with technical implementation details for engineering teams.

What is the recommended password storage hashing method for NIST compliance?▼

The recommended password storage hashing method for NIST compliance is Argon2id. This skill provides password storage hashing guidance and defines key derivation function (KDF) selections to ensure your authentication system meets modern security standards.

How do I audit login flows for NIST 800-63B authentication requirements?▼

You audit login flows for NIST 800-63B authentication requirements by reviewing minimum length enforcement, breach screening integration, MFA guidance, and rate limiting. This skill evaluates existing sign-in systems against required AAL levels for compliance.

Does NIST 800-63B require multi-factor authentication for password systems?▼

NIST 800-63B requires multi-factor authentication guidance for various Authenticator Assurance Levels (AAL). This skill helps define MFA guidance tailored to your required AAL levels, ensuring your authentication system meets federal compliance standards.

What should I include in a password recovery procedure for NIST compliance?▼

A password recovery procedure for NIST compliance should include secure token verification and rate limiting to prevent abuse. This skill guides recovery procedures and translates them into specific engineering requirements for secure authentication workflows.

Related Skills

Explore More Legal & Compliance Skills→
williamzujkowskiwilliamzujkowski
6

IAM Security Reviewer

Evaluate IAM configurations against NIST SP 800-63B/800-53 controls.

Community
Advanced
Objective-ArtsObjective-Arts

web-security

Guide web security practices for password handling, HTTPS, and security headers.

Official
Intermediate
1k-off1k-off
1

umbraco-mfa-login-provider

Implement Umbraco backoffice MFA login provider UI for two-factor authentication enrollment.

Community
Intermediate
ethanolivertroyethanolivertroy
3

compliance-tracker

Track compliance status across multiple frameworks and identify gaps.

Community
Advanced