documentation_complete: true

title: 'Stored Passwords Must Be Encrypted'

description: 'Stored passwords must be encrypted.'

rationale: |-
    Passwords need to be protected at all times and encryption is
    the standard method for protecting passwords. If passwords are
    not encrypted, they can be plainly read and easily compromised.

severity: high

identifiers:
    cce: ""

references:
    cis: ""
    disa: ""
    nist: ""

ocil_clause: 'passwords are not encrypted'
