Do Strong Web Passwords Accomplish Anything?

Download Now
Provided by: Microsoft
Topic: Security
Format: PDF
The authors find that traditional password advice given to users is somewhat dated. Strong passwords do nothing to protect online users from password stealing attacks such as phishing and keylogging, and yet they place considerable burden on users. Passwords that are too weak of course invite brute-force attacks. However, they find that relatively weak passwords, about 20 bits or so, are sufficient to make brute-force attacks on a single account unrealistic so long as a \"Three strikes\" type rule is in place.
Download Now

Find By Topic