A NSS token requires a PIN that has a length of

• A. 6 - 8
• B. 4 - 8
• C. 10 - 20
• D. 8 - 16

Answer: (D)

PIN length on security tokens is a balance between security and usability. For NSS tokens, eight to sixteen characters is a common policy because longer PINs increase the number of possible combinations, making brute-force guessing far harder, while still staying practical for users to enter and for devices to handle. Eight characters provides a meaningful resistance beyond simple 4- or 6-digit pins, and allowing up to sixteen gives flexibility to choose a PIN that is memorable yet strong without hitting input or hardware limits.

Lower bounds like six or four are too short to provide strong protection against guessing. A range that extends to twenty characters is impractical for everyday use and may exceed what the token or user interface can reliably handle. Hence, eight to sixteen characters best fits the typical security and usability needs of NSS tokens.