Weak Passwords Module Documentation

Module Overview (Technical)
Module Overview (Commercial/Business)
Module Overview (End User/Administrator)
Weakness Types
Security Best Practices
Common Scenarios & Examples
Limitations & Important Notes
Troubleshooting Tips
Glossary

---

1. Module Overview (Technical)

What Is Weak Passwords?

Weak Passwords is a security audit tool that scans SIP device passwords across extensions to identify weak, commonly-used, or easily-guessable credentials. It helps administrators identify and remediate security vulnerabilities.

Architecture

Plaintext

┌─────────────────────────────────────────────────────────────────┐
│                 Weak Password Detection                         │
├─────────────────────────────────────────────────────────────────┤
│                                                                 │
│  Backend Service                                                │
│  ┌──────────────────────────────────────────────────────────┐   │
│  │           Password Analyzer                              │   │
│  │                                                          │   │
│  │  For each SIP extension:                                 │   │
│  │    1. Retrieve device password                           │   │
│  │    2. Check against weakness rules:                      │   │
│  │       - Common passwords list                            │   │
│  │       - Sequential numbers (123456)                      │   │
│  │       - Repeated characters (aaaaaa)                     │   │
│  │       - Too short                                        │   │
│  │       - Matches extension number                         │   │
│  │    3. Generate weakness report                           │   │
│  │                                                          │   │
│  └──────────────────────────────────────────────────────────┘   │
│       │                                                         │
│       ▼                                                         │
│  ┌──────────────────────────────────────────────────────────┐   │
│  │           WeakPasswordsPage.tsx                          │   │
│  │                                                          │   │
│  │  Extension    Type         Weakness        Resource      │   │
│  │  ─────────────────────────────────────────────────────  │   │
│  │  1001         SIP Device   Common Password  device_001  │   │
│  │  1005         SIP Device   Too Short        device_005  │   │
│  │  1012         SIP Device   Sequential       device_012  │   │
│  │                                                          │   │
│  └──────────────────────────────────────────────────────────┘   │
│                                                                 │
└─────────────────────────────────────────────────────────────────┘

Key Features

Feature	Description
Password Scan	Analyzes all SIP device passwords
Weakness Detection	Identifies multiple weakness types
Domain Filtering	Filter by domain
On-Demand Check	Manual refresh scan
Report View	Sortable/searchable results

Key Files

File	Description
`modules/weakPasswords/WeakPasswordsPage.tsx`	Report page
`modules/weakPasswords/api.ts`	API calls

---

2. Module Overview (Commercial/Business)

Business Value

Weak Passwords provides proactive security:

Without Weak Passwords	With Weak Passwords
Unknown vulnerabilities	Identified risks
Manual password review	Automated scanning
Reactive security	Proactive hardening
Compliance gaps	Audit-ready reports

Use Cases

Security Audit

- Run scan before compliance review

- Document remediation

New System Hardening

- Check after bulk extension creation

- Ensure strong defaults

Periodic Review

- Regular security checkups

- Identify new weak passwords

Compliance Reporting

- Document password policy enforcement

- Prove security posture

Feature Highlights

Feature	Benefit
Automated Scan	No manual password review
Multiple Checks	Detects various weaknesses
One-Click Refresh	On-demand scanning
Domain Filter	Tenant-specific views
Clear Report	Easy to understand

---

3. Module Overview (End User/Administrator)

What Can You Do?

Scan all SIP device passwords
View weak password report
Filter by domain
Search by extension
Identify weakness types
Take remediation action

Report Interface

Plaintext

┌─────────────────────────────────────────────────────────────────┐
│  ⚠️ Weak Passwords                            [Check Now]        │
├─────────────────────────────────────────────────────────────────┤
│                                                                 │
│  🔍 [Search by extension or name...        ]                   │
│                                                                 │
│  ┌───────────────────────────────────────────────────────────┐  │
│  │ Extension      │ Type       │ Weakness        │ Resource │  │
│  ├────────────────┼────────────┼─────────────────┼──────────┤  │
│  │ 1001 (John)   │ SIP Device │ Common Password │ dev_001  │  │
│  │ 1005 (Sales)  │ SIP Device │ Too Short       │ dev_005  │  │
│  │ 1012 (Support)│ SIP Device │ Sequential      │ dev_012  │  │
│  │ 1020 (Admin)  │ SIP Device │ Repeated Chars  │ dev_020  │  │
│  │ 1025 (CEO)    │ SIP Device │ Matches Ext     │ dev_025  │  │
│  └───────────────────────────────────────────────────────────┘  │
│                                                                 │
│  Showing 5 of 5 results                                         │
│                                                                 │
└─────────────────────────────────────────────────────────────────┘

Quick Tips

TIP

Regular Scans: Run scans weekly or after bulk changes.

TIP

Fix Priority: Address "Common Password" first (highest risk).

CAUTION

Take Action: Weak passwords are security vulnerabilities. Fix them!

---

4. Weakness Types

Common Weakness Categories

Weakness	Description	Risk Level
Common Password	In common password list	🔴 Critical
Too Short	Less than minimum length	🔴 High
Sequential	Sequential numbers (123456)	🟠 High
Repeated Chars	Repeated characters (aaaaaa)	🟠 High
Matches Extension	Password = extension number	🔴 Critical
Dictionary Word	Common dictionary word	🟠 Medium
Simple Pattern	Easy keyboard patterns	🟡 Medium

Common Password Examples

Weak Password	Why It's Weak
`123456`	Sequential, common
`password`	Dictionary word
`1001`	Matches extension
`qwerty`	Keyboard pattern
`111111`	Repeated characters
`abc123`	Simple pattern

---

5. Security Best Practices

Password Requirements

Requirement	Recommendation
Minimum Length	12+ characters
Complexity	Mix of letters, numbers, symbols
Uniqueness	Different from extension
No Patterns	Avoid sequential/repeated
No Dictionary	Avoid common words

Remediation Steps

Generate Strong Password

- Use password generator

- Minimum 16 characters

Update Extension

- Go to Extensions module

- Update device password

Update Device

- Reconfigure SIP phone

- Test registration

Verify Scan

- Run weak password check

- Confirm resolved

---

6. Common Scenarios & Examples

Scenario 1: Post-Deployment Audit

After creating 50 extensions:

Open Weak Passwords module
Click Check Now
Review flagged extensions
Update weak passwords
Re-scan to confirm

Scenario 2: Compliance Preparation

Before security audit:

Run weak password scan
Export results
Fix all identified weaknesses
Document remediation
Final scan for clean report

Scenario 3: Regular Security Review

Monthly security check:

Run weak password scan
Compare to previous scan
Address new weak passwords
Report to management

---

7. Limitations & Important Notes

Technical Notes

NOTE

SIP Passwords Only: Scans device passwords, not voicemail PINs.