Skip to main content
govconCyber — Federal Cybersecurity Law Reference
Back to results
NIST 800-171 R-3.5.8

Prohibit Password Reuse

Official citation: 3.5.8

Class: core · Severity: low

Statement of the obligation — verify against source

3.5.8

What it means

Prohibit reuse of passwords for a specified number of past generations so people can't simply cycle back to an old password. This lifetime restriction does not apply to temporary passwords.

Educational reference only — not legal advice. Consult a qualified assessor or attorney for binding compliance determinations.