Password and Authentication Policy Review
Check rules against current practice.
Added October 15, 2026. Written with AI assistance and checked for clarity and placeholders; not reviewed by a lawyer, accountant, clinician or other professional. How these prompts are made
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
[VERIFY] is an editorial flag, not a blank to fill. Wherever the prompt shows [VERIFY], check that item against a reliable source before you use it (what [VERIFY] means).
Review our authentication policy. Policy text: [POLICY_TEXT]. Current practice as I observe it: [CURRENT_PRACTICE]. Systems in scope: [SYSTEMS]. Check for rules that encourage weak habits, such as frequent forced changes without cause, and missing rules such as length guidance, breach checks, use of a password manager, multi-factor authentication and account recovery. Compare policy with what people actually do. Return a table of gaps, a rewritten policy summary of 200 words in plain language, and a rollout plan. Cite recognised guidance names for me to read myself and confirm [VERIFY]; do not invent citations. Add a worked comparison. Policy says change passwords every 30 days; practice is that people add a number at the end, which weakens security. Better: longer passphrases, a password manager, breach checks and change only after suspected compromise. Policy says nothing about multi-factor authentication; add it. Practice shows sticky notes on monitors; address with a manager and a password manager rollout. Suggest guidance names to read for yourself and confirm [VERIFY], for example national cyber security agency guidance in my country.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.