{"id":22557,"date":"2025-12-29T15:27:25","date_gmt":"2025-12-29T15:27:25","guid":{"rendered":"https:\/\/www.synetis.com\/password-audit\/"},"modified":"2026-05-11T12:05:01","modified_gmt":"2026-05-11T12:05:01","slug":"password-audit","status":"publish","type":"page","link":"https:\/\/www.synetis.com\/en\/ssi-audit\/password-audit\/","title":{"rendered":"Password audit"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\tAccueil<\/a>\n<\/span>\u203a<\/span>\n\tSSI audit<\/a>\n<\/span>\u203a<\/span>\n\tPassword audit\n<\/span><\/div><\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t

Password robustness audit<\/h1>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Test the robustness of your Active Directory passwords with statistical cryptanalysis.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tContact our teams<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

“A single compromised corporate account (login and password) can lead to the compromise of an organization’s Information System.”<\/i><\/i>RetEx from SYNETIS teams during offensive audits.<\/i><\/p>

<\/i><\/p>

The health of an Information System is very closely linked to the passwords it contains. Employee or service provider accounts, application accounts, service accounts, administration accounts… All these passwords are highly prized and targeted by external attackers, but also by malicious or careless internal actors. <\/p>

Despite the presence of bastions, identity federation and strong authentication, what’s really going on in terms of hygiene and compliance with internal password policy? And what does a robust password policy really guarantee? <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Judge the overall strength of passwords using statistical cryptanalysis<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

A password audit using statistical cryptanalysis enables you to assess the overall strength of your employees’ Active Directory passwords, as well as those of service or administration accounts. From this, we can deduce a potential compromise rate (proportion of weak passwords). <\/p>


<\/p>\n

The aim is also to make users more aware of the weaknesses in their passwords, an essential lever in strengthening security levels.<\/p>\n

Today, on average, Synetis breaks over 50% of passwords in less than 5 hours.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Discover the benefits of a password audit<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

A password audit, whether one-off or recurring (every 3 or 6 months), provides decision-makers with concrete statistics, indicators and metrics:<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t\t