Password Management

David Johnson

19 Dec 2022 — 1 min read

Effective password management is important for protecting your personal information and accounts from unauthorized access. Here are some best practices for password management:

Use strong passwords: Strong passwords are long and contain a mix of upper and lower case letters, numbers, and special characters. Avoid using easily guessable passwords such as "password" or "123456". I also try to use 32 chariters or the maximun length possible.
Use unique passwords: Use a unique password for each of your accounts. This will help protect against password-related attacks, as an attacker who obtains one of your passwords will not be able to access your other accounts. I use the password generator provided by my password manager. All good ones have one.
Use a password manager: A password manager is a tool that can help you generate, store, and manage strong, unique passwords. This can help make it easier for you to use strong passwords without having to remember them all. I use LastPass. Yes, I know they have been targeted and had some code stolen. However, attackers have not accessed user data at this time and is still a good option in my opinion. However, there are many to choose from so as long as you use one you will be much safer.
Enable two-factor authentication: Two-factor authentication is an additional layer of security that requires you to enter a code or confirm your identity in addition to your password when logging in to an account. Enable two-factor authentication wherever it is available to help protect against password-related attacks.
Avoid using personal information: Avoid using personal information such as your name, date of birth, or address in your passwords. This information can be easily obtained by attackers and may make it easier for them to guess your password. This applies to security questions as well. Things like "what's your mothers maiden name?" is extreamly easy to find. You can use your password manager to help you remember these security questions.

By following these best practices, you can help protect your accounts and personal information from unauthorized access. It is also a good idea to regularly review and update your passwords to ensure that they are strong and secure.

Supporting the Security Parthenon: How the Five Pillars of Information Security Work Together and Why Authorization Deserves Its Place

Like the pillars of the great Parthenon the five pillars of information security hold up and support a comprehensive security program. In this essay I will discuss the five pillars and how they are connected by providing specific examples of how they support and rely on each other within a

Firewalls, IDS, IPS and Nmap

To prevent unathorized access and malitious attacks on a network system administrators have a few options in their arsinal. Firewalls and Intrusion Detection/Prevention Systems are the main line of defense in this situation. These defenses are effective when configured properly. However, every defense has its weakness. Understanding the limitations

Golden Ticket

Golden Ticket This document covers how to create a Golden Ticket. An Active Directory Domain server is required for this to work. Connected clients are useful but not required. Creating the Ticket To create a Golden Ticket the NT Hash for KRBTGT will need to be aquired as well as

Bash Breakout

Breaking out of a restricted shell is a significant step in ethical hacking and penetration testing. However, sometimes you find yourself in a limited or non-interactive shell environment where essential features like command history navigation and screen clearing don't work. In such cases, upgrading to a fully interactive

Read more

Supporting the Security Parthenon: How the Five Pillars of Information Security Work Together and Why Authorization Deserves Its Place

Firewalls, IDS, IPS and Nmap

Golden Ticket

Bash Breakout