Skip to main content
Unlisted page
This page is unlisted. Search engines will not index it, and only users having a direct link can access it.

Credential Rotation

Credential Rotation​

note

Rotation profiles and per-endpoint rotation policies no longer exist. AuthNull replaces an endpoint account's password when the endpoint is onboarded and rotates it every 30 days, with a per-user setting. See Passwords.

What is Credential Rotation?​

Credential rotation is a security practice employed by AuthNull to periodically change user credentials. This practice is essential for:

  • Mitigating Risks: Regularly changing credentials reduces the window of opportunity for malicious actors to misuse them.
  • Compliance: Many industry regulations and standards mandate periodic credential rotation to ensure data security.
  • Reducing Attack Surface: Old, unused, or compromised credentials can be a potential security risk. Regular rotation ensures that only current and valid credentials are in use.

AuthNull automates this process, so that credentials associated with servers are changed at regular intervals.

password rotation

Password Rotation:​

password rotation

Password rotation involves changing the passwords of user accounts at regular intervals. For instance, a database admin account might have its password rotated every 30 days to ensure that even if the password is compromised, it remains valid for a limited time.

Example: If an admin account's password is "Admin1234" in January, the AuthNull system automatically rotates it to a new, strong password like "XyZ$9a2!" 30 days later, or on the schedule set for that user.

SSH Key Rotation:​

password rotation

SSH (Secure Shell) keys are cryptographic keys used to authenticate and secure connections to servers. Rotating SSH keys means generating a new pair of public and private keys and replacing the old ones. This is crucial, especially if there's a suspicion that the private key has been compromised.

Example: A developer uses an SSH key pair to access a production server. With AuthNull's rotation, the old SSH key pair used in the week 1 might be replaced with a new key pair in second week, ensuring continuous secure access.

Conclusion​

Credential rotation, encompassing both password and SSH key rotations, is a vital aspect of maintaining a secure environment. AuthNull's intuitive interface and automation capabilities make managing this process simple, efficient, and aligned with best security practices.