Internet passwords can be subject to attacks by malicious sources. However, there are measures you can take to make Internet passwords more secure.

About this task

Here are some examples of typical password attacks:

• One type of attack is an attempt to read all the hashed passwords in the Domino® Directory. A user's Internet password is stored in a hashed version in the user's Person record in the Domino Directory. The directory is publicly accessible to all users of the system. You can protect against this sort of attack by using xACLs to stop access to the hashed passwords.
• Another type of attack is that based on guessing passwords when authenticating. In this type of attack, users can still try to authenticate as someone else and try and guess passwords. You protect against this type of attack by using more secure password format, using passwords that are more difficult to guess, or by enabling the Internet password lockout feature on the server.

• More secure password format
• Internet password lockout
• xACLs

  Using more secure password format
  When you enter an Internet password and save the Person document, Domino automatically one-way hashes the Internet password field. To improve the default password, use the more secure password format.

  Using Internet password lockout
  Internet password lockout lets administrators set a threshold value for Internet password authentication failures for Domino Web and Domino Web Access users.

  Using xACLs to secure Internet passwords
  One way to secure Internet passwords is to use Extended ACLs, or xACLs, to control access based on levels in the naming hierarchy, and at the form and field level. For passwords stored in the Domino Directory, administrators can set up xACLs to limit access to Internet passwords to the users themselves, for accessing their own passwords, and to administrators, for allowing administrative changes to passwords.