Unverified50% confidenceFactExact time
NIST has formally stopped accepting security questions as an account recovery method in SP 800-63B-4.
1
Sources
50%
Confidence
Long-term
Relevance
11/3/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedNIST 在 SP 800-63B 指南中不再强制用户定期更换密码，而建议在发现凭据泄露时立即更换72% similarUnverified美国NIST发布了IoT设备网络安全指南（NISTIR 8259），但目前仍以自愿遵守为主62% similarUnverifiedNIST's incident response framework is numbered SP 800-61, and ISO 27035 is the information security incident management standard.61% similarUnverifiedIn SP 800-63B, the U.S. NIST lists SMS OTP as a 'restricted' authentication method and does not recommend it for high-security scenarios.60% similarUnverifiedNIST发布了SP 800-161r1（供应链风险管理实践）和网络安全框架（CSF）2.0等配套文件59% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1131504API
curl https://kongchang.com/api/v1/knowledge/claims/1131504MCP
get_claim(id=1131504)