NIST 800-63x Compliance

[wdawgnc]

It is a security best practice to be familiar with and attempt to meet or exceed NIST guidelines. In the case of Incognoto, NIST 800-63 is likely the most relevant/applicable publication. You can find the full content located here: https://pages.nist.gov/800-63-3/sp800-63-3.html

You should really review the entire thing, but I would draw your attention most specifically to 800-63b (https://pages.nist.gov/800-63-3/sp800-63b.html) which deals directly with passwords, password guidelines and password storage.