Password

Password threats from:

  • Weak Passwords
    • Easy to guess words, birthdays, or simple patterns.
    • Hackers can crack these passwords with brute-force attacks or password dictionaries.
  • Password Reuse
    • Using the same password for multiple accounts creates a domino effect if one account is compromised.
  • Phishing Attacks
    • Deceptive emails or messages trick users into revealing their passwords.
  • Social Engineering
    • Hackers manipulate victims into sharing passwords..
  • Spyware
    • Malicious software that records your keystrokes.
Time takes to brute-force crack a password.

Defending Against Password Attacks

  • Complex Passwords: Use strong passwords at least 12 characters long and include a combination of uppercase and lowercase letters, numbers, and symbols.
  • Unique Passwords: Avoid using the same password for multiple accounts. If one account is compromised, attackers could gain access to others. email address.
  • Password Managers: Consider using a password manager to generate and store complex, unique passwords for all your accounts. For example, Bitwarden or 1Password.
  • Multi-Factor Authentication (MFA): Enable MFA whenever possible. This adds an extra layer of security by requiring a second verification code to log in, even if your password is compromised. (Authenticator apps e.g., Microsoft Authenticator are more secure than SMS MFA.)
  • Beware of Phishing: Don’t enter your password on untrusted websites or in response to suspicious emails or messages.
  • Check for Indications of Breach: Sites like HaveIBeenPwned.com can be used to check for signs of breach by entering email address.