Push random passwords to systems:

  • Periodically (e.g., between 3AM and 4AM).
  • When users check passwords back in.
  • When users want a specific password.
  • On urgent termination.

  • Suitable for servers and PCs on the corporate network.

Pull initiated by user devices:

  • Periodically.
  • Random time-of-day.
  • Opportunistically, when connectivity is available.

  • Suitable for off-site laptops, systems in a DMZ.