Find compromised passwords in your Active Directory
Not only can Lithnet Password Protection prevent users from selecting compromised passwords, it also allows you to audit your directory on demand. Find every user whose current password has turned up in a breach, and whenever you add new compromised passwords, perform a sweep and be instantly notified if any users need to change their password.
Support plans from USD 750 a year, including 300 usersFree for every organization
Breached password audit
| Account | Result |
|---|---|
| j.wilson | Breached |
| svc-backup | Breached |
| m.garcia | Not found |
| a.nguyen | Breached |
| r.okafor | Not found |
3 accounts with a breached password
Active Directory can't tell you which passwords have leaked
Many people use the same password at work and on other websites, and they often keep it for months or years. When one of those websites is breached, that password ends up in a list that attackers can download and try against your accounts. Active Directory has no way to compare its passwords with those lists, so a breached password can keep working.
Password Protection closes that gap. It checks your users' current passwords against the breached password lists you choose, including the full Have I Been Pwned data set, and shows you exactly which accounts are at risk, so you can get those passwords changed.
Find and fix breached passwords in three steps
- 1Bring in breached passwords from any source, such as Have I Been Pwned or your own security provider.
- 2Run the audit and see every account whose current password is on your lists, along with when it was set and when the account last logged on.
- 3Ask those users to choose a new password, and Password Protection makes sure the new one meets your standard.
Run it again every time your lists grow
Breached password lists grow all the time. Whenever you add new compromised passwords, run the audit again and you'll know straight away if any of your users need to change their password. In between, Password Protection keeps blocking every new password that's on your lists.
Apply the NIST password guidelines in Active DirectoryFrequently asked questions
Does the audit change anything in Active Directory?
No. The audit lists the accounts whose password is in your breached password lists, and you decide what to do about each one.
Can we run an audit without turning on password enforcement?
Yes. You can run the audit on its own and see how many accounts have a breached password before you deploy the filter.
Is it really free?
Yes. Password Protection is free for every organization and has no limits on users or features, however no support is provided by Lithnet. If you run it in production we recommend you purchase a support plan.
Get started today
Support plans start at USD 750 a year, including 300 users. Lithnet Password Protection runs on your domain controllers, and a support plan ensures you have help available directly from Lithnet when you need it. We're there to help troubleshoot problems, provide advice, and ensure you are first to be notified about security fixes.