Module 2: Passwords & Authentication 🔑

Learn how to create strong passwords and the importance of multi‑factor authentication.

What Are Passwords?

Passwords are the most common way to secure accounts and systems. They act as digital keys, preventing unauthorized access to sensitive information. Weak or reused passwords make it easier for attackers to break in.

Characteristics of Strong Passwords

• Length: At least 12–16 characters
• Complexity: Mix of uppercase, lowercase, numbers, and symbols
• Uniqueness: Different for every account
• Unpredictability: Avoid personal details like names, birthdays, or common words

Example: R!verSunset2025* is stronger than Sunset2025.

Common Mistakes to Avoid

• Using simple passwords like 123456 or password
• Reusing the same password across multiple accounts
• Writing passwords down or sharing them with others
• Ignoring password manager tools that can safely store credentials

Multi‑Factor Authentication (MFA)

MFA adds an extra layer of security by requiring more than just a password. Even if a password is stolen, MFA makes it harder for attackers to gain access.

Types of MFA factors:

• Something you know — password or PIN
• Something you have — phone, security token, smart card
• Something you are — fingerprint, facial recognition

Example: Logging in with a password plus a one‑time code sent to your phone.

Best Practices for Authentication

• Enable MFA on all critical accounts (email, banking, work systems)
• Use a password manager to generate and store unique passwords
• Change passwords immediately if you suspect compromise
• Regularly review account security settings

Key Takeaways

• Strong passwords are essential for protecting accounts.
• MFA significantly reduces the risk of unauthorized access.
• Combining good password hygiene with MFA creates a robust defense strategy.

Quiz