Support Centre

You have out of 5 free articles left for the month

Signup for a trial to access unlimited content.

Start Trial

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.

Italy: Garante publishes guidelines on password retention

On March 1, 2024, the Italian data protection authority (Garante) published its password retention guidelines. According to the Garante, the guidelines are aimed at all companies and administrations that store the passwords of users on their systems. The guidelines provide recommendations on the cryptographic functions currently considered most secure for storing passwords.

The guidelines discuss password hashing (to include pepper techniques), password-based key derivation function 2 (PBKDF2), and Aragon2.

You can read the press release here and the guidelines here, both only available in Italian.

Feedback