The macOS system must be configured to prevent displaying password hints.

STIG ID: APPL-13-003012  |  SRG: SRG-OS-000480-GPOS-00227 |  Severity: medium |  CCI: CCI-000366 |  Vulnerability Id: V-257231

Vulnerability Discussion

Password hints leak information about passwords in use and can lead to loss of confidentiality.

Check

Verify the macOS system is configured to prevent displaying passwords hints with the following command:

/usr/sbin/system_profiler SPConfigurationProfileDataType | /usr/bin/grep "RetriesUntilHint"

RetriesUntilHint = 0;

If "RetriesUntilHint" is not set to "0", this is a finding.

Fix

Configure the macOS system to prevent displaying password hints by installing the "Login Window Policy" configuration profile.
This website is not created by, run, approved, or endorsed by the U.S. Department of Defense. Use at your own risk. This website is created by open-source software.