Linux Account password Security policy

Objective

For server security, the server's account password is a very important thing

We can choose to cancel the account password login, only use the public key to log in, but sometimes it may not be convenient

Here to tell you how the account password management more secure

One, the maximum number of days to use the account password

Modify Pass_max_days in/etc/login.defs 1095

The same password can only be used for up to 1095 days

Second, password modification minimum interval days

Modify Pass_min_days in/etc/login.defs 7

The minimum password will be 7 days for a change.

Third, account inactivity maximum number of days

Useradd-d-F 1095

If there is no activity within 1095 days, the account is unregistered

Linux Account password Security policy