Scribd Logo
Upload

Welcome to Scribd!

  • 21 views

    3.1.1.5 Lab - Create and Store Strong Passwords

    Uploaded by

    George Ivan
    This document discusses creating and storing strong passwords. It explains that strong passwords are complex but also easy for the user to remember. Passwords should include a mix of uppercase and lowercase letters, numbers, and symbols. The document also recommends using password managers like LastPass to securely store passwords. LastPass encrypts passwords and stores them in the cloud, which can be convenient but also poses security risks if the account is compromised. The document emphasizes creating unique, complex passwords that are hard for others to guess while still being memorable for the user.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    3.1.1.5 Lab - Create and Store Strong Passwords

    Uploaded by

    George Ivan
    21 views3 pages
    This document discusses creating and storing strong passwords. It explains that strong passwords are complex but also easy for the user to remember. Passwords should include a mix of uppercase and lowercase letters, numbers, and symbols. The document also recommends using password managers like LastPass to securely store passwords. LastPass encrypts passwords and stores them in the cloud, which can be convenient but also poses security risks if the account is compromised. The document emphasizes creating unique, complex passwords that are hard for others to guess while still being memorable for the user.

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    This document discusses creating and storing strong passwords. It explains that strong passwords are complex but also easy for the user to remember. Passwords should include a mix of uppercase and lowercase letters, numbers, and symbols. The document also recommends using password managers like LastPass to securely store passwords. LastPass encrypts passwords and stores them in the cloud, which can be convenient but also poses security risks if the account is compromised. The document emphasizes creating unique, complex passwords that are hard for others to guess while still being memorable for the user.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    21 views3 pages

    3.1.1.5 Lab - Create and Store Strong Passwords

    Uploaded by

    George Ivan
    This document discusses creating and storing strong passwords. It explains that strong passwords are complex but also easy for the user to remember. Passwords should include a mix of uppercase and lowercase letters, numbers, and symbols. The document also recommends using password managers like LastPass to securely store passwords. LastPass encrypts passwords and stores them in the cloud, which can be convenient but also poses security risks if the account is compromised. The document emphasizes creating unique, complex passwords that are hard for others to guess while still being memorable for the user.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    You are on page 1of 3

    Lab – Create and Store Strong Passwords

    Objectives
    Understand the concepts behind a strong password.
    Part 1: Explore the concepts behind creating a strong password.
    Part 2: Explore the concepts behind securely storing your passwords?

    Background / Scenario
    Passwords are widely used to enforce access to resources. Attackers will use many techniques to learn
    users’ passwords and gain unauthorized access to a resource or data.
    To better protect yourself, it is important to understand what makes a strong password and how to store it
    securely.

    Required Resources
    • PC or mobile device with Internet access

    Part 1: Creating a Strong Password


    Strong passwords have four main requirements listed in order of importance:
    1) The user can easily remember the password.
    2) It is not trivial for any other person to guess a password.
    3) It is not trivial for a program to guess or discover a password.
    4) Must be complex, containing numbers, symbols and a mix of upper case and lower case letters.
    Based on the list above, the first requirement is probably the most important because you need to be able to
    remember your password. For example, the password #4ssFrX^-aartPOknx25_70!xAdk<d! is considered a
    strong password because it satisfies the last three requirements, but it is very difficult to remember.
    Many organizations require passwords to contain a combination of numbers, symbols, and lower and upper
    case letters. Passwords that conform to that policy are fine as long as they are easy for the user to remember.
    Below is a sample password policy set for a typical organization:
    • The password must be at least 8 characters long
    • The password must contain upper- and lower-case letters
    • The password must contain a number
    • The password must contain a non-alphanumeric character

     Cisco and/or its affiliates. All rights reserved. Cisco Confidential Page 1 of 3 www.netacad.com
    Lab – Create and Store Strong Passwords

    Take a moment to analyze the characteristics of a strong password and the common password policy set
    shown above. Why does the policy set neglect the first two items? Explain.

    Although you can set a stronger password, the policy is not interested in you remembering the password
    because you can recover it by accessing a link and it wants a password longer than 8 characters, this
    situation can also be solved with a token generator

    A good way to create strong passwords is to choose four or more random words and string them together.
    The password televisionfrogbootschurch is stronger than J0n@than#81. Notice that while the second
    password is in compliance with the policies described above, password cracker programs are very efficient at
    guessing that type of password. While many password policy sets will not accept the first password,
    televisionfrogbootschurch, it is much stronger than the second. It is easier for the user to remember
    (especially is associated with an image), it is very long and its random factor makes it hard for password
    crackers to guess it.
    Using an online password creation tool, create passwords based on the common company password policy
    set described above.
    a. Open a web browser and go to http://passwordsgenerator.net
    b. Select the options to conform to password policy set
    c. Generate the password.
    Is the password generated easy to remember?

    Using an online password creation tool, create passwords based on random words. Notice that because
    the words are appended together, they are not seen as dictionary words.
    d. Open a web browser and go to http://preshing.com/20110811/xkcd-password-generator/
    e. Generate a random word password by clicking Generate Another! at the top portion of the webpage.
    f. Is the password generated easy to remember?

    Part 2: Securely Storing Passwords


    If the user chooses to use a password manager, the first strong password characteristic can be dropped
    because the user has access to the password manager at all times. Notice that some users only trust their
    passwords to their own memory. Password managers, either local or remote, must have a password store,
    and it can be compromised.
    The password manager password store must be strongly encrypted and access to it must be tightly
    controlled. With mobile phone apps and web interfaces, cloud-based password managers provide anytime,
    uninterrupted access to its users.
    A popular password manager is Last Pass.
    Create a trial Lastpass account:
    a. Open a web browser and go to https://lastpass.com/

     Cisco and/or its affiliates. All rights reserved. Cisco Confidential Page 2 of 3 www.netacad.com
    Lab – Create and Store Strong Passwords

    b. Click Start Trial to create a trial account.


    c. Fill out the fields, as instructed.
    d. Set a master password. This password gives you access to your LastPass account.
    e. Download and install the LastPass’ client for your operating system.
    f. Open the client and log in with your LastPass master password.
    g. Explore LastPass password manager.
    As you add passwords to Lastpass, where are the passwords stored?
    IIn the password section of my account
    Besides you, at least one other entity has access to your passwords. Who is that entity?
    Lastpass
    While having all your passwords stored on the same place can be convenient, there are drawbacks. Can
    you think of any?
    If my lastpass account is hacked, he can have access to all passwords

    Part 3: What Is a Strong Password Then?


    Using on the strong password characteristics given at the beginning of this lab, choose a password that is
    easy to remember but hard to be guessed. Complex passwords are OK as long as it does not impact more
    important requirements such as the ability to easily remember it.
    If a password manager is used, the need to be easily remembered can be relaxed.
    Below is a quick summary:
    Choose a password you can remember.
    Choose a password that someone else cannot associate with you.
    Choose different passwords and never use the same password for different services.
    Complex passwords are OK as long as it does not become harder to remember.

     Cisco and/or its affiliates. All rights reserved. Cisco Confidential Page 3 of 3 www.netacad.com

    You might also like

    pFad - Phonifier reborn

    Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

    Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


    Alternative Proxies:

    Alternative Proxy

    pFad Proxy

    pFad v3 Proxy

    pFad v4 Proxy