Forum Discussion
How Often does the ASM Known Leak Credentials gets updated?
How Often does the ASM Known Leak Credentials gets updated? How does F5 gets this information?
Thank you,
Erika
- Nathan_F__F5_
Employee
Hi Erika,
The ASM uses a database of hashed username/password pairs to implement its checks for leaked credentials. The usernames and passwords themselves are not stored on the ASM. The hashes are built from records sourced from multiple databases of compromised usernames and passwords with over a billion entries in total. This database is maintained by the Product Development team but does not have a specific update cycle. Instead, the database is simply updated as more compromised credentials are released.
I hope this helps.
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com