password

Identity and Access

A secret string a person memorizes and types to prove who they are. It is the weakest common credential because people reuse it, pick guessable ones, and can be tricked into typing it into the wrong box.

Related terms

credential

password hash

MFA

Appears in(132)

Logic and DecisionsProgramming Foundations
Filesystem and PermissionsLinux for Security
Processes and ServicesLinux for Security
HTML: The StructureWeb Development
Text Processing: grep, awk, sedLinux for Security
Networking from the CLILinux for Security
Errors and How to Handle ThemPython Deep Dive
Putting It OnlineWeb Development
Making Decisions with ifIntro to Python
Repeating with LoopsIntro to Python
Build a Small ProgramIntro to Python
What a Backend IsBackends and APIs
What Version Control IsVersion Control with Git
Building on the APIBuilding with AI
Service and Version DetectionRecon and Scanning
Authentication and API SecurityBackends and APIs
Undoing MistakesVersion Control with Git
tcpdump FundamentalsTraffic Analysis
Dissecting Traffic in WiresharkTraffic Analysis
HTTP vs HTTPS vs VPNTraffic Analysis
HTTP FundamentalsWeb and HTTP
How Web Apps WorkWeb and HTTP
Cookies, Sessions, and AuthWeb and HTTP
Counting Without CountingMath and Logic
The OWASP Top 10Web and HTTP
Threat Modeling Your LifeDigital Self-Defense
Passwords and AuthenticationDigital Self-Defense
Injection and XSSVulnerabilities and Exploitation
Spotting Scams and PhishingDigital Self-Defense
Your Data TrailDigital Self-Defense
Hashing and Password SecurityVulnerabilities and Exploitation
Browsing PrivatelyDigital Self-Defense
Linux Privilege EscalationVulnerabilities and Exploitation
Your Privacy ToolkitDigital Self-Defense
Approaching a TargetCTF Methodology
From Enumeration to FootholdCTF Methodology
From Foothold to RootCTF Methodology
Hashing and IntegrityCryptography
TLS in PracticeCryptography
How Passwords Are StoredPassword Attacks
Wordlists and RulesPassword Attacks
Cracking with HashcatPassword Attacks
Online vs Offline AttacksPassword Attacks
Active Directory FundamentalsActive Directory
Kerberos and KerberoastingActive Directory
Common AD AttacksActive Directory
The Human Attack SurfaceSocial Engineering
Phishing and PretextingSocial Engineering
Defending PeopleSocial Engineering
Windows Architecture and ProcessesWindows Fundamentals
The Windows RegistryWindows Fundamentals
Windows Permissions and PrivilegesWindows Fundamentals
Windows Event LogsWindows Fundamentals
Windows Networking and SMBWindows Fundamentals
Talking HTTP with PythonPython for Security
Docker ComposeDocker and Containers
Container Security BasicsDocker and Containers
SQL InjectionWeb Application Attacks
Cross-Site ScriptingWeb Application Attacks
Attacking AuthenticationWeb Application Attacks
Access Control and IDORWeb Application Attacks
Repeater and IntruderBurp Suite
Crawling and ScanningBurp Suite
SUID Binaries and SudoLinux Privilege Escalation
Dangerous Privileges and InstallersWindows Privilege Escalation
Hunting for CredentialsWindows Privilege Escalation
WPA2 and the Four-Way HandshakeWireless Security
Capturing and Cracking a HandshakeWireless Security
Evil Twin and Rogue APsWireless Security
Defending a Wireless NetworkWireless Security
OSINT FundamentalsOpen Source Intelligence
Profiling PeopleOpen Source Intelligence
Google DorkingOpen Source Intelligence
Memory ForensicsDigital Forensics
Network ForensicsDigital Forensics
Detection and TriageIncident Response
Log Analysis for RespondersIncident Response
Alerts and TriageSOC Analyst Fundamentals
The MITRE ATT&CK FrameworkSOC Analyst Fundamentals
Escalation and HandoffSOC Analyst Fundamentals
What a SIEM DoesSIEM and Log Analysis
Writing Detection QueriesSIEM and Log Analysis
Hunting in LogsThreat Hunting
Analyzing Malware SafelyMalware Analysis
VPNs and Zero TrustNetwork Defense
Detecting Lateral MovementNetwork Defense
Cloud Models and Shared ResponsibilityCloud Security Fundamentals
Identity in the CloudCloud Security Fundamentals
AWS IAM in DepthAWS Security
Enumerating AWS With KeysAWS Security
Common Cluster MisconfigurationsKubernetes Security
How Modern APIs WorkAPI Security
The OWASP API Top 10API Security
API Authentication FlawsAPI Security
Static Analysis With GhidraReverse Engineering
What GRC Actually IsGovernance, Risk, and Compliance
Risk ManagementGovernance, Risk, and Compliance
Policies People Actually FollowGovernance, Risk, and Compliance
Managing SecretsSecure Coding
Security Code ReviewSecure Coding
iOS App InternalsMobile Application Security
Common Mobile VulnerabilitiesMobile Application Security
The IoT Attack SurfaceIoT and OT Security
Firmware BasicsIoT and OT Security
Common IoT WeaknessesIoT and OT Security
Attacking Weak HashingCryptographic Attacks
Recognizing Bad CryptoCryptographic Attacks
Stocking It With TargetsBuilding a Home Lab
Snapshots and Safe HabitsBuilding a Home Lab
What Threat Modeling Buys YouThreat Modeling
Data Flow DiagramsThreat Modeling
Threat Modeling a Real AppThreat Modeling
Turning Threats Into FixesThreat Modeling
Writing a FindingWriting Security Reports
The Executive SummaryWriting Security Reports
Attacking GraphQLAdvanced Web Attacks
Authentication vs AuthorizationIdentity and Access Management
SSO and FederationIdentity and Access Management
MFA Done RightIdentity and Access Management
Privileged Access ManagementIdentity and Access Management
The Identity LifecycleIdentity and Access Management
Identity as the PerimeterZero Trust Architecture
Why Email Is a TargetEmail Security
Phishing Defense in DepthEmail Security
Secure Email GatewaysEmail Security
Investigating a PhishEmail Security
DNS AttacksDNS and Network Services Security
DHCP and NTP RisksDNS and Network Services Security
The Supply Chain Attack SurfaceSoftware Supply Chain Security
Dependency RiskSoftware Supply Chain Security
Encryption at Rest and in TransitData Protection and Privacy
Data Loss PreventionData Protection and Privacy