{"id":7296,"date":"2026-10-18T11:57:48","date_gmt":"2026-10-18T09:57:48","guid":{"rendered":"https:\/\/mu.it-cyberwall.com\/guides\/administrator-accounts-passwords-and-two-factor-authentication\/"},"modified":"2026-10-18T20:09:01","modified_gmt":"2026-10-18T18:09:01","slug":"comptes-administration-mots-de-passe","status":"publish","type":"page","link":"https:\/\/mu.it-cyberwall.com\/en\/guides\/comptes-administration-mots-de-passe\/","title":{"rendered":"Administrator accounts, passwords and two-factor authentication"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"7296\" class=\"elementor elementor-7296 elementor-6675\" data-elementor-settings=\"{&quot;ha_cmc_init_switcher&quot;:&quot;no&quot;}\" data-elementor-post-type=\"page\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-5aaa771 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"5aaa771\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-cb890c2\" data-id=\"cb890c2\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-a5027d2 elementor-widget elementor-widget-html\" data-id=\"a5027d2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t\t<style>.itcw-g{max-width:900px;margin:0 auto;font-size:17px;line-height:1.65;color:#2b2f3a}.itcw-g h2{margin-top:10px}.itcw-g .tw{overflow-x:auto;margin:18px 0}.itcw-g table{width:100%;border-collapse:collapse;font-size:15px;min-width:640px}.itcw-g th,.itcw-g td{border:1px solid #e3e6ee;padding:10px 12px;vertical-align:top;text-align:left}.itcw-g thead th{background:#0E0129;color:#fff}.itcw-g tbody th{background:#F6F7FA;font-weight:600}.itcw-g .box{background:#F6F7FA;border-left:4px solid #DE3241;padding:16px 20px;border-radius:6px;margin:18px 0}.itcw-g .box.ok{border-left-color:#2C9703}.itcw-g sup a{text-decoration:none;font-weight:600}.itcw-g ol.src li{margin-bottom:8px;font-size:15px;word-break:break-word}.itcw-g .note{font-size:14px;color:#6b7080}.itcw-g .toc a{display:inline-block;margin:4px 10px 4px 0}<\/style>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-161876c elementor-widget elementor-widget-heading\" data-id=\"161876c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h6 class=\"elementor-heading-title elementor-size-default\">Guide<\/h6>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-872c42e elementor-widget elementor-widget-heading\" data-id=\"872c42e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Administrator accounts, passwords and two-factor authentication<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-90b20b7 elementor-widget elementor-widget-text-editor\" data-id=\"90b20b7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"itcw-g\"><p style=\"text-align:center\">Administrator accounts are the keys to your IT: an attacker who gets hold of one can do anything. Separate accounts, two-factor authentication, strong passwords: here are the ANSSI and CNIL rules, boiled down to what an SME needs to do.<\/p><p class=\"note\" style=\"text-align:center\">Updated on 18 October 2026 \u00b7 Figures are sourced at the bottom of the page; opinions are those of IT CyberWall.<\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-8d995d8 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"8d995d8\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-02b1a64\" data-id=\"02b1a64\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-e980ca3 elementor-widget elementor-widget-text-editor\" data-id=\"e980ca3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"itcw-g\"><div class=\"box toc\"><strong>Contents:<\/strong><br \/><a href=\"#enjeu\">Why these accounts are the target<\/a> \u00b7 <a href=\"#comptes\">Separate administrator accounts<\/a> \u00b7 <a href=\"#mfa\">Two-factor authentication<\/a> \u00b7 <a href=\"#mots-de-passe\">Passwords that hold up<\/a> \u00b7 <a href=\"#controle\">Your checklist<\/a> \u00b7 <a href=\"#it-cyberwall\">What IT CyberWall does<\/a> \u00b7 <a href=\"#sources\">Sources<\/a><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-96d01a6 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"96d01a6\" data-element_type=\"section\" data-e-type=\"section\" id=\"enjeu\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-9b479af\" data-id=\"9b479af\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-14eb491 elementor-widget elementor-widget-heading\" data-id=\"14eb491\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Why these accounts are the target<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-51c3c9b elementor-widget elementor-widget-text-editor\" data-id=\"51c3c9b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"itcw-g\"><p>An attacker who obtains the password of an administrator account can do anything: install ransomware on every workstation, erase data, create accounts to come back later. Protecting these accounts is the measure that most reduces the potential damage. ANSSI devotes several measures of its IT hygiene guide to it: inventory of privileged accounts, separation of user and administrator roles, strong authentication<sup><a href=\"#source-1\">[1]<\/a><\/sup>.<\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-d730d9d elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"d730d9d\" data-element_type=\"section\" data-e-type=\"section\" id=\"comptes\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-a711005\" data-id=\"a711005\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-5ded03e elementor-widget elementor-widget-heading\" data-id=\"5ded03e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Separate administrator accounts<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-22c1fbc elementor-widget elementor-widget-text-editor\" data-id=\"22c1fbc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"itcw-g\"><ul><li><strong>An administrator account separate from the everyday account<\/strong>, with a different password<sup><a href=\"#source-2\">[2]<\/a><\/sup>.<\/li><li><strong>Never use email or browse the web<\/strong> with an administrator account<sup><a href=\"#source-2\">[2]<\/a><\/sup><sup><a href=\"#source-1\">[1]<\/a><\/sup>.<\/li><li><strong>Named accounts<\/strong>: you know who did what<sup><a href=\"#source-2\">[2]<\/a><\/sup><sup><a href=\"#source-1\">[1]<\/a><\/sup>.<\/li><li><strong>Least privilege<\/strong>: everyone has only the rights they need, and users are not administrators of their own workstation<sup><a href=\"#source-2\">[2]<\/a><\/sup><sup><a href=\"#source-1\">[1]<\/a><\/sup>.<\/li><li><strong>An up-to-date inventory<\/strong> of privileged accounts, including those of providers<sup><a href=\"#source-1\">[1]<\/a><\/sup>.<\/li><\/ul><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-1d3370c elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"1d3370c\" data-element_type=\"section\" data-e-type=\"section\" id=\"mfa\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-2f07775\" data-id=\"2f07775\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-0e26862 elementor-widget elementor-widget-heading\" data-id=\"0e26862\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Two-factor authentication<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c3faf53 elementor-widget elementor-widget-text-editor\" data-id=\"c3faf53\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"itcw-g\"><p>ANSSI recommends favouring multi-factor authentication<sup><a href=\"#source-3\">[3]<\/a><\/sup> and requiring at least two factors for administration<sup><a href=\"#source-2\">[2]<\/a><\/sup>. In practice, start with:<\/p><ol><li>administrator accounts (Microsoft 365, Google Workspace, servers, firewall, hosting provider, domain name);<\/li><li>remote access (VPN, remote desktop);<\/li><li>email for all users.<\/li><\/ol><p>An authenticator app or a security key is better than a code received by SMS, which is easier to intercept.<\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-9cdc744 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"9cdc744\" data-element_type=\"section\" data-e-type=\"section\" id=\"mots-de-passe\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-e710068\" data-id=\"e710068\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-adbce09 elementor-widget elementor-widget-heading\" data-id=\"adbce09\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Passwords that hold up<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a46de82 elementor-widget elementor-widget-text-editor\" data-id=\"a46de82\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"itcw-g\"><table><thead><tr><th>Case<\/th><th>CNIL recommendation<sup><a href=\"#source-4\">[4]<\/a><\/sup><\/th><\/tr><\/thead><tbody><tr><td>Password only<\/td><td>12 characters with upper case, lower case, numbers and special characters, or 14 characters with no special character required, or a passphrase of 7 words<\/td><\/tr><tr><td>Account protected by lockout after several failed attempts<\/td><td>8 characters of 3 different types, or 5 words<\/td><\/tr><\/tbody><\/table><ul><li><strong>No forced renewal for everyone<\/strong>: the CNIL and ANSSI no longer require it for ordinary accounts, but keep it for privileged accounts<sup><a href=\"#source-4\">[4]<\/a><\/sup><sup><a href=\"#source-3\">[3]<\/a><\/sup>.<\/li><li><strong>An immediate change<\/strong> if a compromise is suspected<sup><a href=\"#source-3\">[3]<\/a><\/sup>.<\/li><li><strong>A password manager<\/strong> provided by the company<sup><a href=\"#source-3\">[3]<\/a><\/sup>.<\/li><li><strong>Default passwords<\/strong> on internet boxes, printers, cameras and servers are changed as soon as they are installed<sup><a href=\"#source-3\">[3]<\/a><\/sup><sup><a href=\"#source-1\">[1]<\/a><\/sup>.<\/li><\/ul><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-88d48d5 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"88d48d5\" data-element_type=\"section\" data-e-type=\"section\" id=\"controle\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-cd03d59\" data-id=\"cd03d59\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-a47a06c elementor-widget elementor-widget-heading\" data-id=\"a47a06c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Your checklist<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-74033bc elementor-widget elementor-widget-text-editor\" data-id=\"74033bc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"itcw-g\"><ol><li>Who is administrator of what? The list exists and is up to date.<\/li><li>No administrator reads their email with their administrator account.<\/li><li>Two-factor authentication is active on all administrator accounts and remote access.<\/li><li>Accounts belonging to former employees and former providers are disabled.<\/li><li>The \u00ab owner \u00bb account for your Microsoft 365 or Google Workspace and your domain name is in the company&#8217;s name.<\/li><\/ol><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-4108b17 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"4108b17\" data-element_type=\"section\" data-e-type=\"section\" id=\"it-cyberwall\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-46236df\" data-id=\"46236df\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-6feb8b0 elementor-widget elementor-widget-heading\" data-id=\"6feb8b0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">What IT CyberWall does<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6b53a45 elementor-widget elementor-widget-text-editor\" data-id=\"6b53a45\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"itcw-g\"><p>We inventory privileged accounts, separate administrator accounts, enable two-factor authentication and set up a password manager. Our own access to your systems is through named accounts, and you keep the list.<\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-3354225 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"3354225\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-6eafa76\" data-id=\"6eafa76\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-019e895 elementor-widget elementor-widget-heading\" data-id=\"019e895\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Lost track of who is administrator of what?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6ee3e08 elementor-widget elementor-widget-text-editor\" data-id=\"6ee3e08\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>We inventory your accounts and set up two-factor authentication.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-afe4942 elementor-align-center elementor-widget elementor-widget-button\" data-id=\"afe4942\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-md\" href=\"https:\/\/mu.it-cyberwall.com\/en\/contact\/?mf-besoin=cybersecurite#formulaire\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-arrow-right\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M190.5 66.9l22.2-22.2c9.4-9.4 24.6-9.4 33.9 0L441 239c9.4 9.4 9.4 24.6 0 33.9L246.6 467.3c-9.4 9.4-24.6 9.4-33.9 0l-22.2-22.2c-9.5-9.5-9.3-25 .4-34.3L311.4 296H24c-13.3 0-24-10.7-24-24v-32c0-13.3 10.7-24 24-24h287.4L190.9 101.2c-9.8-9.3-10-24.8-.4-34.3z\"><\/path><\/svg>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Describe my needs<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-da40d4b elementor-widget elementor-widget-text-editor\" data-id=\"da40d4b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><a href=\"https:\/\/mu.it-cyberwall.com\/en\/guides\/\">\u2190 All our guides<\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-f3041be elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"f3041be\" data-element_type=\"section\" data-e-type=\"section\" id=\"sources\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-aff82d4\" data-id=\"aff82d4\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-3af6f16 elementor-widget elementor-widget-heading\" data-id=\"3af6f16\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Sources<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-759cd91 elementor-widget elementor-widget-text-editor\" data-id=\"759cd91\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"itcw-g\"><p class=\"note\">Sources consulted on 18 October 2026. Supplier prices are shown excluding tax, in the currency and region of the published price list, and may change: always check the official page before deciding.<\/p><ol class=\"src\"><li id=\"source-1\">ANSSI \u2013 Guide d\u2019hygi\u00e8ne informatique, v2.0 (measures 5, 8 to 13, 27 to 29) \u2014 <a href=\"https:\/\/messervices.cyber.gouv.fr\/documents-guides\/guide_hygiene_informatique_anssi.pdf\" target=\"_blank\" rel=\"noopener\">messervices.cyber.gouv.fr\/documents-guides\/guide_hygiene_informatique_anssi.pdf<\/a><\/li><li id=\"source-2\">ANSSI \u2013 Recommendations to Secure Administration of IT Systems, v2.0 (24 April 2018) \u2014 <a href=\"https:\/\/cyber.gouv.fr\/sites\/default\/files\/2018\/10\/guide_anssi_secure_admin_is_pa_022_en_v2.pdf\" target=\"_blank\" rel=\"noopener\">cyber.gouv.fr\/sites\/default\/files\/2018\/10\/guide_anssi_secure_admin_is_pa_022_en_v2.pdf<\/a><\/li><li id=\"source-3\">ANSSI \u2013 Recommandations relatives \u00e0 l\u2019authentification multifacteur et aux mots de passe, v2.0 (8 October 2021) \u2014 <a href=\"https:\/\/messervices.cyber.gouv.fr\/guides\/recommandations-relatives-lauthentification-multifacteur-et-aux-mots-de-passe\" target=\"_blank\" rel=\"noopener\">messervices.cyber.gouv.fr\/guides\/recommandations-relatives-lauthentification-multifacteur-et-aux-mots-de-passe<\/a><\/li><li id=\"source-4\">CNIL \u2013 D\u00e9lib\u00e9ration n\u00b0 2022-100 du 21 juillet 2022, recommandation relative aux mots de passe \u2014 <a href=\"https:\/\/www.cnil.fr\/sites\/cnil\/files\/atoms\/files\/deliberation-2022-100-du-21-juillet-2022_recommandation-aux-mots-de-passe.pdf\" target=\"_blank\" rel=\"noopener\">www.cnil.fr\/sites\/cnil\/files\/atoms\/files\/deliberation-2022-100-du-21-juillet-2022_recommandation-aux-mots-de-passe.pdf<\/a><\/li><\/ol><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":7206,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_seopress_titles_title":"Admin accounts, passwords and MFA | IT CyberWall","_seopress_titles_desc":"Separate admin accounts, two-factor authentication, password length: the ANSSI and CNIL recommendations summarised for SMEs.","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"business two-factor authentication,separate admin account,sme password policy,anssi password recommendations","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"footnotes":""},"class_list":["post-7296","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/mu.it-cyberwall.com\/en\/wp-json\/wp\/v2\/pages\/7296","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mu.it-cyberwall.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/mu.it-cyberwall.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/mu.it-cyberwall.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mu.it-cyberwall.com\/en\/wp-json\/wp\/v2\/comments?post=7296"}],"version-history":[{"count":1,"href":"https:\/\/mu.it-cyberwall.com\/en\/wp-json\/wp\/v2\/pages\/7296\/revisions"}],"predecessor-version":[{"id":7297,"href":"https:\/\/mu.it-cyberwall.com\/en\/wp-json\/wp\/v2\/pages\/7296\/revisions\/7297"}],"up":[{"embeddable":true,"href":"https:\/\/mu.it-cyberwall.com\/en\/wp-json\/wp\/v2\/pages\/7206"}],"wp:attachment":[{"href":"https:\/\/mu.it-cyberwall.com\/en\/wp-json\/wp\/v2\/media?parent=7296"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}