Chapter 1
IT Concepts and Terminology
Course: Comptia Tech Fc0 U71
Subject: Comptia Tech Fc0U71
Chapter: Security
Passwords remain one of the most fundamental components of digital security. While multifactor authentication (MFA) is increasingly recommended, strong password hygiene is critical to prevent unauthorized access, brute-force attacks, credential stuffing, and social engineering compromises. Below are best practices that organizations and individuals should implement to maximize password security.
1. Password Length
Explanation:
Password length is one of the most critical factors affecting password strength. The longer a password, the more possible combinations exist, which exponentially increases the time and computing power an attacker needs to guess or brute-force the password.
- Recommended Minimum Length: Modern guidelines recommend at least 12 to 16 characters for general use.
- Passphrases: Instead of complex strings of characters, passphrases made of several unrelated words (e.g., “CorrectHorseBatteryStaple”) offer strong security due to length and randomness, while remaining memorable.
- Longer passwords provide better defense not only against brute force but also against offline cracking attacks, where attackers attempt password guesses against stolen hashed databases.