UCF STIG Viewer Logo

The macOS system must be configured to prevent displaying password hints.


Overview

Finding ID Version Rule ID IA Controls Severity
V-252525 APPL-12-003012 SV-252525r816389_rule Medium
Description
Password hints leak information about passwords in use and can lead to loss of confidentiality.
STIG Date
Apple macOS 12 (Monterey) Security Technical Implementation Guide 2022-09-07

Details

Check Text ( C-55981r816387_chk )
To check that password hints are disabled, run the following command:

/usr/sbin/system_profiler SPConfigurationProfileDataType | /usr/bin/grep RetriesUntilHint

If the return is null or is not "RetriesUntilHint = 0", this is a finding.
Fix Text (F-55931r816388_fix)
This setting is enforce using the "Login Window" Policy.