Suspicious Website Logins
Introduced| English | Meaning |
|---|---|
| password attack/ˈpæswɜːd əˈtæk/ | An attempt to obtain, guess or misuse passwords to gain access to an account or system. |
| authentication/ɔːˌθentɪˈkeɪʃn/ | Checking that a claimed identity is valid. |
| dictionary/ˈdɪkʃənəri/ | Here, a prepared list of likely passwords, words and variations used to generate password guesses. |
| password manager/ˈpæswɜːd ˈmænɪdʒə/ | Software that stores and organises account credentials and can help generate and fill unique passwords. |
| multifactor authentication/ˌmʌltɪˈfæktə ɔːˌθentɪˈkeɪʃn/ | multifactor authentication |
What a password attack is
- A password attack 密码攻击 tries to log in with guessed or stolen passwords.
- An online attack tries them against a real login page.
- Automated tools can try thousands of passwords fast.
Signs in the log
- Many failed logins in a short time.
- Login attempts at unusual hours.
- Logins from unknown devices.
A hardware security key: strong authentication 身份验证 reduces damage when a password is phished
Strong password or weak password?
Strong passwords are long, random, and unique; weak ones follow common patterns or use personal info.
Which is a sign of an online password attack in the logs?
Difficulty 1/5 · 100 coins + a small bonus on first completion today
A burst of failed logins signals guessing.
An adversary's list of likely passwords built from your personal info is a ____.
Difficulty 1/5 · 100 coins + a small bonus on first completion today
A dictionary of guesses is fed to an automated tool.
Why weak passwords fail
- People use predictable patterns like
Summer24!. - They reuse names of pets or family.
- An adversary builds a dictionary 字典 of likely guesses.
Never reuse one password across sites. If one site is breached, adversaries try that same password everywhere else — a trick called credential reuse.
Which password is strongest?
Difficulty 1/5 · 100 coins + a small bonus on first completion today
Long, random, unique beats any pattern.
Multifactor authentication (MFA) is no more secure than a strong password alone.
Difficulty 1/5 · 100 coins + a small bonus on first completion today
False. MFA asks for extra proof, such as a texted code or a fingerprint, so a stolen password alone is not enough to get in.
Order these from WEAKEST to STRONGEST password.
Difficulty 3/5 · 200 coins + a small bonus on first completion today
Length and randomness increase strength.
Which make authentication stronger? (Choose all)
Difficulty 2/5 · 140 coins + a small bonus on first completion today
Reusing a password — even a strong one — is risky.
Making authentication stronger
- Use long, random, unique passwords — a password manager 密码管理器 helps.
- Avoid names, dates, and meaningful words.
- Turn on multifactor authentication (MFA) 多因素身份验证.
P@ssw0rd2024 feels clever but follows the exact common pattern (word + number + symbol) an adversary's dictionary expects. A random 16-character string from a password manager is far safer.
An online password attack guesses against a live login and shows up as many failed attempts. People lose because they pick weak, patterned passwords. Fix it with long unique passwords and MFA.