Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The macOS system must be configured to prevent displaying password hints.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-252525 | APPL-12-003012 | SV-252525r816389_rule | Medium |
| Description |
|---|
| Password hints leak information about passwords in use and can lead to loss of confidentiality. |
| STIG | Date |
|---|---|
| Apple macOS 12 (Monterey) Security Technical Implementation Guide | 2023-02-13 |
Details
| Check Text ( C-55981r816387_chk ) |
|---|
| To check that password hints are disabled, run the following command: /usr/sbin/system_profiler SPConfigurationProfileDataType | /usr/bin/grep RetriesUntilHint If the return is null or is not "RetriesUntilHint = 0", this is a finding. |
| Fix Text (F-55931r816388_fix) |
|---|
| This setting is enforce using the "Login Window" Policy. |