Topic: password-policy

• Account lockout and password quality on Linux with pam_faillock and pwquality

  pam_faillock locks an account after repeated failed logins and the faillock command inspects or clears that state; pam_pwquality enforces password-strength rules from pwquality.conf. Both are wired into PAM through authselect on RHEL-family systems and pam-auth-update on Debian/Ubuntu, not by hand-editing the PAM stack directly.

  methodology · en · reviewed · knowledge as of 2026-09-24

Machine-readable: JSON