Password strength Dr. X

Logistics Project: Declare your teams! Proposal presentations on Feb. 16!!! Homework due on Feb. 14

What makes a strong password? Length? Special characters? Numbers?

https://xkcd.com/936/

Websites that measure your password strength https://howsecureismypassword.net/ http://www.passwordmeter.com/ Use these two sites with as many passwords as you can use in 5 mins. Report your observations. What makes a strong password? Should you trust these websites and put your real password…?

Password managers LastPass: https://www.lastpass.com/ Dashlane: https://www.dashlane.com/ Use two factor authentication Keep some passwords in your head: A couple of important email addresses Banking

How do we protect passwords? Hashing We need to save passwords. Why? If we save passwords like this: Is that safe?

Hashing explained If your database looks like this: Can you guess the password? Possibly… Add some salt: random numbers, letters More difficult Add two factor authetication...

Hashing explained https://www.youtube.com/watch?v=--tnZMuoK3E Dictionary attack Brute force attack

Tips for good passwords Never use a dictionary word Avoid using your pet’s name, parent name, your phone number, driver’s license number or anything which is easy to guess. Avoid using passwords with sequence or repeated characters: For Ex: 1111111, 12345678 or qwerty, asdfgh. Password dress: http://lorrie.cranor.org/blog/wp- content/uploads/2013/12/IMG_5014.jpg

One more piece of advice Change password often… The more time a hacker has, they may find your password Change your password especially if you hear about compromised sites/social media etc.