Fantastic Passwords and Where to Find Them
summary
Passwords are demonstrably broken: a 2017–18 audit finds ~25% of employee passwords weak and 1,400 as password123; a public corpus lists ~555 million breached passwords. Practical fixes: require at least 13 characters (allow spaces and emojis up to ~255 chars), ban breached and dictionary passwords, and rate strength with zxcvbn score 0–4. Check breaches with Have I Been Pwned’s Pwned Passwords API using k-anonymity via first-five SHA-1 prefixes, and add two‑factor auth.
AI-written summary · about
chapters (15)
- 0:00Start
- 5:42Password123
- 6:08PATTERNS
- 6:24Password1!
- 7:03AN EXAMPLE
- 9:57I GOT HACKED
- 10:14REPETITION
- 10:52BREACHES DISQUS
- 12:09HOW DO WE FIX THIS?
- 12:32THE GUIDELINES WERE WRONG
- 15:16IN NODE.JS?
- 17:19DEMO
- 21:27NEXT LEVEL
- 21:50PASSWORDS ARE TERRIBLE
- 22:10CHECK AGAINST BREACHES AND DICTIONARIES
related talks
40mFantastic Passwords and Where to Find Them
46mRequiem for the Password
25mEverything You Know About Passwords Is Wrong
30mhunter2: A Symphony of Password Horror
31mBreaking Bad (Passwords)
30mA capital letter, a number, a special character, an emotional journey for the character, a subplot
10mPassword policies of most top websites fail to follow best practices
47mYour Password Complexity Requirements are Worthless