# CIS M365 v7 — Banned Passwords (external list)
# One password per line; lines starting with # are ignored
# These are merged with any inline bannedPasswords in the YAML baseline

# Common corporate names
Contoso
Fabrikam
Northwind
Wingtip

# Common weak passwords
Password
Welcome
Admin
Login
Passw0rd
Qwerty
123456

# Microsoft / Office branding
Microsoft
Office365
Outlook
Azure
Teams
SharePoint