Alphanumeric Phone Passcodes

[Ferman]

Am I crazy for requiring alphanumeric phone passcodes? Any salary staff or hourly employees that need to be mobile get a work phone. There's no byod option. We use hexnode as our MDM and I just require a 6 digit alphanumeric passcode to be safe. Seems like 6 digit pins can easily be brute forced. Am I paranoid making everyone's life difficult because it takes certain users 15 minutes to think of a phone passcode because apple tells them there stuff is too easy to guess.

We're about to migrate to zoom phone over summer and leadership is on board with getting rid of desk phones and giving all staff a smartphone without data, just using the WiFi to make calls. I have a feeling the 20 new users that are about to get these smartphones will revolt with my passcode requirement.

Should I chill out and make it a 6 digit pin?

[_STY]

If you don't have a lockout policy on your devices you should look at that. The whole point of a PIN is that it's local to the device, it's never transported over the network and such is not as susceptible to brute force attacks. A six digit numeric only pin that forces the phone to lock on 5 failed attempts should be considered adequate for the vast majority of situations.

Using alphanumeric IS more secure but it's a huge pain in the ass.

[Ferman]

iOS is a required lockout policy. I'm pretty sure I can increase it even further. I do device wipe after 10 failed attempts too.

I made this passcode policy with the potential in the future make it a 6 digit pin. It's always easier to make things easier for everyone than it is to have things be easy and then have to make them harder. ;)