February 2019
Intermediate to advanced
134 pages
3h 36m
English
Passwords are meant to be secrets shared between a user and the server they’re authenticating to. If attackers can predict those passwords, they can bypass this defense. Here are a couple steps we can take to keep it difficult for an attacker to predict a password.
We covered this back in Default Passwords, but it’s worth mentioning again. Never use default passwords.
It’s worthwhile to consider the ways credentials can be compromised. In general, it’s much more likely for a password to be stolen from a server or phished than it is to be brute forced.
Brute forcing passwords through the front end of a web application is impractical. It’s a ...
Read now
Unlock full access