NIST Special Publication 800-63B

The National Institute of Standards and Technology (NIST) guidelines for digital identity, specifically covering authentication and lifecycle management.

What it anchors

• The justification for dropping complex password theatre in favour of longer minimum lengths (15 characters) and regular checks against breach-exposed lists.