ANSSI Recommendations for Multi-Factor Authentication and Passwords

The ANSSI guide “Recommandations relatives à l’authentification multifacteur et aux mots de passe” provides comprehensive security recommendations focused on authentication methods. It strongly advocates for the use of multifactor authentication (MFA), which combines multiple factors from different categories—knowledge (e.g., passwords), possession (e.g., security tokens), and inherence (e.g., biometrics)—to significantly reduce the risk of unauthorized access. The guide emphasizes the importance of using strong cryptographic authentication methods rather than relying solely on passwords, especially discouraging insecure factors like SMS-based codes due to vulnerabilities such as SIM swapping. It also advises against periodic mandatory password changes for standard users, reserving such measures primarily for administrative accounts. Additionally, the document offers practical guidance on managing authentication securely, including risk analysis, secure verification channels, and maintaining authentication logs. Overall, the guide aims to help organizations implement robust, layered authentication strategies to better protect their information systems.

Publication's URL

Publication's scorecard

Issuer: ANSSI
Country: FRA
Scope: Cyber
Typology: Standard
Publication's date: October 8, 2021
Category: Identity & Access Management
Sector: Cross-Sector
Rating: (No Ratings Yet)

Loading...