8.13 Word Lists

To strengthen the security of the passwords you must define a word list. A word list is a prepared password dictionary that Self Service Password Reset checks against the text that users set as their passwords. Self Service Password Reset does not allow a password if that text is available in the word list. The word list is a ZIP file containing one or more plain text files with one word per line. The Word List setting enables you to add the details of Word List files, identify whether to use case sensitivity in Word List, minimum number of character match, etc.

For more details to upload Word List, see Configuring the Word List Settings.

For more information about enabling Word List, see Configuring Password Policies

  1. Log in to Self Service Password Reset at https://dns-name/sspr as an administrator.

  2. In the toolbar, click your name.

  3. Click Configuration Editor.

  4. Click Settings > Word List.

  5. Configure the following settings:

    Word List File URL

    Specify the URL of a file containing a word list for dictionary checking to prevent users from using common words as passwords.

    The first time a startup happens with a new word list configuration, the word list must be compiled into a database. For progress details, consult the status screen and logs. The word list file format consists of one or more text files with a single word per line, enclosed in a ZIP file. The Tether! #comment: at the start of a line indicates a comment.

    The value must be a valid URL, using the protocol "file" (local file system), "http", or "https".

    1. Click Add Value.

    2. Specify the valid URL in Edit Value - Word List File URL.

    Word List Case Sensitivity

    Enable this option to make all matches using the word list case-sensitive. Changing this value recompiles the word list in SSPR.

    Word List Word Size Check

    Specify the minimum number of characters required for SSPR to compare a password to the Word List dictionary. If this value is set to zero or the password to be checked is less than the value indicated here, the system verifies the complete password against the Word List, but not smaller portions of it.

    For instance, if the system-checked password is wordlist and this parameter is set to 6, the combinations of following words are all verified against the configured dictionary. If any of these values correspond to a term in the Word List dictionary, the system rejects the password as a match to the Word List.

    • wordli

    • wordlis

    • wordlist

    • ordlis

    • rdlist

    Seed List File URL

    Provide a valid URL containing the location of the seed list. When SSPR creates random passwords, it can provide users with friendly password suggestions. It accomplishes this by taking a seed word or words and then randomly changing that term until it is sufficiently complicated and fits the user's configured rules.

    The value must be a valid URL, using the protocol "file" (local file system), "http", or "https".

    1. Click Add Value.

    2. Specify the valid URL in Edit Value - Seed List File URL.