Password Security and Management Flashcards

What is credential stuffing?

Answer: Using stolen username/password pairs from one breach to try to access other services

Credential stuffing automates the use of leaked login pairs against other websites, exploiting password reuse across accounts.

Which password storage method is considered LEAST secure?

Answer: Writing in a plain text file on your desktop

Storing passwords in a plain text file provides no protection whatsoever — anyone with file access can immediately read all credentials.

What is the purpose of a 'salt' added to a hashed password?

Answer: To add a random value that prevents two identical passwords from producing the same hash

A salt is a random value added to a password before hashing so that identical passwords produce unique hashes, defeating precomputed rainbow table attacks.

What should you do before entering your password on a website?

Answer: Check that the URL uses HTTPS and the domain is correct

Verifying the HTTPS padlock and the exact domain name protects against phishing and man-in-the-middle attacks before you type sensitive credentials.

What is a rainbow table attack?

Answer: Using precomputed hash values to reverse-lookup hashed passwords quickly

Rainbow tables are precomputed tables of hash values that allow attackers to quickly look up the plaintext password corresponding to a given hash.

Which practice BEST protects you when using public Wi-Fi and entering passwords?

Answer: Connecting through a VPN before logging in

A VPN encrypts your traffic on public Wi-Fi, preventing eavesdroppers from intercepting your credentials in transit.