How passwords get stolen
On This Lesson 4 topics
This lesson is planned. The outline below lists the topics it will cover. The full lesson has not been published yet.
In this lesson
know the common ways passwords are lost, so the controls make sense.
Planned topics
- Database leak: attackers copy the user table and try to crack hashes offline.
- Guessing: brute force against the login endpoint.
- Credential stuffing: trying passwords leaked from other sites, because people reuse them.
- Phishing and malware steal passwords outside your system; you limit damage, not prevent it.
- Logs, backups, and error messages can leak passwords by accident.
Draft outline details
Demonstration
a table: attack / where it happens / main defense.
Check your understanding
Why does a leak at another website threaten your Shop?
Show answer
People reuse passwords, so attackers try them on Shop.
Practice
Apply this lesson with the module's lab, exercises and quiz.
Marking a lesson complete is optional and you can undo it any time. Your progress stays in this browser.