{"id":35582,"date":"2019-10-31T22:05:11","date_gmt":"2019-10-31T19:05:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/periodicheskaya-smena-parolej-ustarevshaya-praktika-prishlo-vremya-ot-neyo-otkazatsya\/"},"modified":"2019-10-31T22:05:11","modified_gmt":"2019-10-31T19:05:11","slug":"periodicheskaya-smena-parolej-ustarevshaya-praktika-prishlo-vremya-ot-neyo-otkazatsya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/periodicheskaya-smena-parolej-ustarevshaya-praktika-prishlo-vremya-ot-neyo-otkazatsya","title":{"rendered":"Regelbunden byte av l\u00f6senord \u00e4r en f\u00f6r\u00e5ldrad praxis, det \u00e4r dags att \u00f6verge den.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

I m\u00e5nga IT-system finns det ett obligatoriskt krav p\u00e5 att regelbundet \u00e4ndra l\u00f6senord. Detta \u00e4r kanske det mest hatade och mest on\u00f6diga kravet fr\u00e5n s\u00e4kerhetssystem. Vissa anv\u00e4ndare anv\u00e4nder som en genv\u00e4g helt enkelt att \u00e4ndra siffran i slutet.<\/p>\n

Denna praxis har orsakat en m\u00e4ngd besv\u00e4r. Men folk var tvungna att st\u00e5 ut, eftersom det handlar om s\u00e4kerhet<\/i>. Nu \u00e4r detta r\u00e5d helt f\u00f6r\u00e5ldrat. I maj 2019 tog till och med Microsoft slutligen bort kravet p\u00e5 periodisk l\u00f6senords\u00e4ndring fr\u00e5n grundl\u00e4ggande s\u00e4kerhetskrav f\u00f6r b\u00e5de personliga och serverversioner av Windows 10: h\u00e4r \u00e4r ett officiellt uttalande i bloggen<\/a><\/noindex> med en lista \u00f6ver \u00e4ndringar i versionen Windows 10 v 1903 (observera frasen Dropping the password-expiration policies that require periodic password changes<\/i>). Sj\u00e4lva reglerna och systempolicyn Windows 10 Version 1903 and Windows Server 2019 Security Baseline<\/i> har lagts till i paketet Microsoft Security Compliance Toolkit 1.0<\/a><\/noindex>.<\/p>\n

Du kan visa dessa dokument f\u00f6r cheferna och s\u00e4ga: tiderna har f\u00f6r\u00e4ndrats. Obligatorisk l\u00f6senords\u00e4ndring \u00e4r en relikt, nu n\u00e4stan officiellt. \u00c4ven s\u00e4kerhetsrevisioner kommer nu inte att kontrollera detta krav (om de f\u00f6ljer de officiella reglerna f\u00f6r grundl\u00e4ggande datorskydd under Windows).
\n<\/a><\/noindex>
\n\"Regelbunden
\nEtt utdrag av listan \u00f6ver grundl\u00e4ggande s\u00e4kerhetspolicys f\u00f6r Windows 10 v1809 och \u00e4ndringar i 1903, d\u00e4r motsvarande policys f\u00f6r l\u00f6senordens giltighetstid inte l\u00e4ngre till\u00e4mpas. F\u00f6r \u00f6vrigt avskaffas \u00e4ven administrat\u00f6rs- och g\u00e4stkonton som standard i den nya versionen.<\/i><\/p>\n

Microsoft f\u00f6rklarar p\u00e5 ett l\u00e4ttf\u00f6rst\u00e5eligt s\u00e4tt i sin blogg varf\u00f6r de har avskaffat regeln om obligatorisk l\u00f6senords\u00e4ndring: \"Periodisk utg\u00e5ng av l\u00f6senord \u00e4r endast ett skydd mot risken att l\u00f6senordet (eller hash) stj\u00e4ls under sin giltighetstid och anv\u00e4nds av obeh\u00f6riga. Om l\u00f6senordet inte \u00e4r stulet finns det ingen anledning att byta det. Och om du har bevis f\u00f6r att l\u00f6senordet har stulits, vill du uppenbarligen agera omedelbart, snarare \u00e4n att v\u00e4nta p\u00e5 att det ska g\u00e5 ut f\u00f6r att l\u00f6sa problemet.\"<\/p>\n

D\u00e4refter f\u00f6rklarar Microsoft att det i dagens l\u00e4ge \u00e4r fel att skydda sig mot st\u00f6ld av l\u00f6senord p\u00e5 det h\u00e4r s\u00e4ttet: \"Om det \u00e4r k\u00e4nt att ett l\u00f6senord sannolikt kommer att bli stulit, hur m\u00e5nga dagar \u00e4r det acceptabelt att l\u00e5ta tjuven anv\u00e4nda det stulna l\u00f6senordet? Standardv\u00e4rdet \u00e4r 42 dagar. Verkar inte detta vara en absurd l\u00e5ng tid? Det \u00e4r faktiskt mycket l\u00e5ng tid, och \u00e4nd\u00e5 har v\u00e5r nuvarande grundl\u00e4ggande tidsgr\u00e4ns satts till 60 dagar - tidigare var den 90 dagar - eftersom frekvent byte av l\u00f6senord medf\u00f6r sina egna problem. Och om l\u00f6senordet inte n\u00f6dv\u00e4ndigtvis kommer att stj\u00e4las, f\u00e5r du dessa problem utan n\u00e5gon nytta. Dessutom, om dina anv\u00e4ndare \u00e4r villiga att byta ett l\u00f6senord mot en godis, kommer ingen policy om l\u00f6senordsutg\u00e5ng att hj\u00e4lpa. \"<\/p>\n

Alternativ<\/h1>\n

\nMicrosoft skriver att deras grundl\u00e4ggande s\u00e4kerhetspolicys \u00e4r avsedda att anv\u00e4ndas av v\u00e4lsk\u00f6tta, s\u00e4kerhetsmedvetna f\u00f6retag. De \u00e4r ocks\u00e5 avsedda att fungera som v\u00e4gledning f\u00f6r revisorer. Om en s\u00e5dan organisation har inf\u00f6rt listor \u00f6ver f\u00f6rbjudna l\u00f6senord, m\u00e5ste den multipla autentisering, skydd mot bruteforce-attacker och detektering av avvikande inloggningsf\u00f6rs\u00f6k, kr\u00e4vs det d\u00e5 att l\u00f6senordet utg\u00e5r periodiskt? Och om de inte har inf\u00f6rt moderna skydd, hj\u00e4lper det dem d\u00e5 att ha en utg\u00e5ngstid f\u00f6r l\u00f6senordet?<\/p>\n

Logiken fr\u00e5n Microsoft \u00e4r f\u00f6rv\u00e5nansv\u00e4rt \u00f6vertygande. Vi har tv\u00e5 alternativ:<\/p>\n

    \n
  1. F\u00f6retaget har inf\u00f6rt moderna skydds\u00e5tg\u00e4rder.\n<\/li>\n
  2. F\u00f6retag inte<\/i> inf\u00f6rt moderna skydds\u00e5tg\u00e4rder.<\/li>\n<\/ol>\n

    \nI det f\u00f6rsta fallet ger ett periodiskt byte av l\u00f6senord inga ytterligare f\u00f6rdelar.<\/p>\n

    I det andra fallet \u00e4r ett periodiskt byte av l\u00f6senord v\u00e4rdel\u00f6st.<\/p>\n

    S\u00e5ledes, ist\u00e4llet f\u00f6r l\u00f6senordets utg\u00e5ng, b\u00f6r vi f\u00f6rst och fr\u00e4mst anv\u00e4nda multipla autentisering<\/b>. Ytterligare skydds\u00e5tg\u00e4rder anges ovan: listor \u00f6ver f\u00f6rbjudna l\u00f6senord, skydd mot bruteforce och detektering av andra avvikande inloggningsf\u00f6rs\u00f6k.<\/p>\n

    \u00abPeriodisk utg\u00e5ng av l\u00f6senord \u00e4r en gammal och f\u00f6r\u00e5ldrad skydds\u00e5tg\u00e4rd.<\/i>, \u2014 sammanfattar Microsoft, \u2014 och vi anser inte att det beh\u00f6vs n\u00e5got specifikt v\u00e4rde f\u00f6r v\u00e5r grundl\u00e4ggande skyddsniv\u00e5. Genom att ta bort det fr\u00e5n v\u00e5r grundniv\u00e5 kan organisationer v\u00e4lja det som b\u00e4st motsvarar deras avsedda behov, utan att bryta mot v\u00e5ra rekommendationer.<\/p>\n

    Utdata<\/h1>\n

    \nOm ett f\u00f6retag idag tvingar anv\u00e4ndare att \u00e4ndra l\u00f6senord med j\u00e4mna mellanrum, vad skulle en utomst\u00e5ende observat\u00f6r t\u00e4nka?<\/p>\n

      \n
    1. Givet:<\/b> f\u00f6retaget anv\u00e4nder en f\u00f6r\u00e5ldrad skyddsmekanism.\n<\/li>\n
    2. Antagande:<\/b> f\u00f6retaget har inte implementerat moderna skyddsmekanismer.\n<\/li>\n
    3. Slutsats:<\/b> dessa l\u00f6senord \u00e4r enklare att f\u00e5 tag p\u00e5 och anv\u00e4nda.<\/li>\n<\/ol>\n

      \nDet visar sig att regelbunden f\u00f6r\u00e4ndring av l\u00f6senord g\u00f6r f\u00f6retaget till en mer attraktiv m\u00e5ltavla f\u00f6r attacker.<\/p>\n

      \n\"Regelbunden
      \n<\/a><\/noindex>
      \n
      K\u00e4lla:       habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

      \u0412\u043e \u043c\u043d\u043e\u0433\u0438\u0445 IT-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u043f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u043c\u0435\u043d\u044b \u043f\u0430\u0440\u043e\u043b\u0435\u0439. \u042d\u0442\u043e, \u043f\u043e\u0436\u0430\u043b\u0443\u0439, \u0441\u0430\u043c\u043e\u0435 \u043d\u0435\u043d\u0430\u0432\u0438\u0441\u0442\u043d\u043e\u0435 \u0438 \u0441\u0430\u043c\u043e\u0435 \u0431\u0435\u0441\u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043b\u0430\u0439\u0444\u0445\u0430\u043a\u0430 \u043f\u0440\u043e\u0441\u0442\u043e \u043c\u0435\u043d\u044f\u044e\u0442 \u0446\u0438\u0444\u0440\u0443 \u0432 \u043a\u043e\u043d\u0446\u0435. \u0422\u0430\u043a\u0430\u044f \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430 \u0432\u044b\u0437\u044b\u0432\u0430\u043b\u0430 \u043c\u0430\u0441\u0441\u0443 \u043d\u0435\u0443\u0434\u043e\u0431\u0441\u0442\u0432. \u041e\u0434\u043d\u0430\u043a\u043e \u043b\u044e\u0434\u044f\u043c \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u0442\u0435\u0440\u043f\u0435\u0442\u044c, \u0432\u0435\u0434\u044c \u044d\u0442\u043e \u0440\u0430\u0434\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0422\u0435\u043f\u0435\u0440\u044c \u044d\u0442\u043e\u0442 \u0441\u043e\u0432\u0435\u0442 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u043d\u043e \u043d\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u0435\u043d. \u0412 \u043c\u0430\u0435 2019 \u0433\u043e\u0434\u0430 \u0434\u0430\u0436\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-35582","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Regelbunden f\u00f6r\u00e4ndring av l\u00f6senord \u00e4r en f\u00f6r\u00e5ldrad praktik, det \u00e4r dags att \u00f6verge den | ProHoster","description":"I m\u00e5nga IT-system finns en obligatorisk regel om regelbunden f\u00f6r\u00e4ndring av l\u00f6senord. Det kanske \u00e4r det mest hatade och mest v\u00e4rdel\u00f6sa kravet fr\u00e5n s\u00e4kerhetssystem.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/periodicheskaya-smena-parolej-ustarevshaya-praktika-prishlo-vremya-ot-neyo-otkazatsya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0441\u043c\u0435\u043d\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u2014 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0430\u044f \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430, \u043f\u0440\u0438\u0448\u043b\u043e \u0432\u0440\u0435\u043c\u044f \u043e\u0442 \u043d\u0435\u0451 \u043e\u0442\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f | ProHoster","og:description":"\u0412\u043e \u043c\u043d\u043e\u0433\u0438\u0445 IT-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u043f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u043c\u0435\u043d\u044b \u043f\u0430\u0440\u043e\u043b\u0435\u0439. \u042d\u0442\u043e, \u043f\u043e\u0436\u0430\u043b\u0443\u0439, \u0441\u0430\u043c\u043e\u0435 \u043d\u0435\u043d\u0430\u0432\u0438\u0441\u0442\u043d\u043e\u0435 \u0438 \u0441\u0430\u043c\u043e\u0435 \u0431\u0435\u0441\u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.","og:url":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/periodicheskaya-smena-parolej-ustarevshaya-praktika-prishlo-vremya-ot-neyo-otkazatsya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:05:11+00:00","article:modified_time":"2019-10-31T19:05:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35582","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 23:52:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 23:11:37","updated":"2026-01-21 23:52:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/35582","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=35582"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/35582\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=35582"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=35582"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=35582"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}