Real-Life Examples of Poor Password Management and Their Consequences

📚 Quick Study Guide

• 🔑 Weak Passwords: Easily guessable passwords (e.g., 'password', '123456') are a primary vulnerability.
• 🔄 Password Reuse: Using the same password across multiple accounts means that if one account is compromised, all are at risk.
• 📝 Lack of Multi-Factor Authentication (MFA): Without MFA, even a strong password can be bypassed if intercepted.
• 💾 Unencrypted Storage: Storing passwords in plain text (e.g., in a document) makes them vulnerable to theft.
• 🎣 Phishing Attacks: Falling victim to phishing can trick users into revealing their passwords.
• ⚠️ Insider Threats: Malicious or negligent employees can expose password information.
• 📅 Outdated Security Practices: Failing to update security protocols and software leaves systems vulnerable.

Practice Quiz

1. Which of the following is the MOST common consequence of using 'password' as your password?
   1. A) Enhanced security.
   2. B) Account compromise.
   3. C) Improved memory.
   4. D) Faster login times.
2. What is the primary risk associated with reusing the same password across multiple websites?
   1. A) Reduced cognitive load.
   2. B) Increased account security.
   3. C) If one account is compromised, all are at risk.
   4. D) Faster password recovery.
3. Why is storing passwords in an unencrypted text file a bad idea?
   1. A) It makes them easier to remember.
   2. B) It protects them from hackers.
   3. C) It makes them easily accessible to anyone with access to the file.
   4. D) It reduces the risk of forgetting them.
4. What is Multi-Factor Authentication (MFA) designed to protect against, even if a password is stolen?
   1. A) Data loss due to hardware failure.
   2. B) Unauthorized access to an account.
   3. C) Phishing emails.
   4. D) Software bugs.
5. What type of attack tricks users into revealing their passwords by pretending to be a trustworthy entity?
   1. A) Brute-force attack.
   2. B) Phishing attack.
   3. C) Denial-of-service attack.
   4. D) Man-in-the-middle attack.
6. An employee intentionally shares a database of customer passwords with a competitor. This is an example of:
   1. A) Accidental data loss.
   2. B) A strong password policy.
   3. C) An insider threat.
   4. D) Ethical hacking.
7. Failing to regularly update your password management software can lead to which security vulnerability?
   1. A) Improved system performance.
   2. B) Exposure to known exploits.
   3. C) Reduced storage space.
   4. D) Enhanced user interface.