Further clarity on Enhanced Password Protection

Help
,
1

This discussion asked the question about what exactly enhanced password protection is as listed in the pricing tier. The answer was:

Enhanced Password Protection refers to breached password detection, and Credential Guard which will let a user know they are using a known leaked password.
Breached Password Detection

However Breached Password Detection is an explicitly named different line item, so I don’t feel like this question has been sufficiently answered. If it’s not password strength policies, and it’s different enough to be a separate line item what exactly is it?

1 Like
4

I have the same question.

The tooltip says that it’s “A way to increase the security of passwords by making them more difficult to guess through brute force attacks.”

My guess is that it means they use stronger hashing algorithms / salt techniques when this feature is enabled.

But since part of the selling point of services like Auth0 is to not have to worry so much about security, I’d expect them to be more transparent about what this means. What makes the lower-tier passwords less protected?