To protect information, property, and more. For example: Secure your account, Data, System, Software,…
- For user:
－> Avoid easy password like:123456, abc, qweryui, etc,…
－> Combine characters (including upper and lower case) and symbols
－> Change your password periodically.
- For Verifiers:
－> Verifiers should allow all printed ASCII characters and Unicode symbols up to 64 characters in length. (Enhancement of complexity)
－> Verifiers should not allow unauthenticated claimants to access password hints. (Only trust authenticated services)
－> Verifiers should limit the number of failed authentication attempts and lock out potential adversaries.
…
- Password Managers Automatically generate complicated passwords and remember them for you.
- Two-factor/Multi-factor Authentication Verify your identity with two devices. End-to-end Encryption End-to-end encryption is a way of encrypting and decrypting on the same system without a middleman. (A more practical example is Zoom and Apple messages.)
Deletion in the computer didn't remove "all" data. It still preserves remnants in your hard disk.
－> Secure deletion comes into play: It turns those remnant files into zeros and ones.
－> Some remnants remain since your deleted files are inaccessible by the operation system.
- Hashing It uses difficult math to encrypt your information. One-way hashing allows only the hashed password to be stored, so your original password wouldn't be known.
To avoid the same result, add another input to interfere with the result:
Unlike using traditional usernames and passwords to represent a single account, It is a password-less verification. When you first visit a website, your device will generate both a public key and a private key and send the public key to the website. Next time when you log in, the website will send a challenge message, your device uses a math algorithm to encrypt your private key, which turns out to generate a signature. On the website, the web decrypts the signature with the public key you provided last time to prove you are the same user.
Examples: Microsoft Authenticator App or Windows Hello, faceID, fingerprint (biology identification), FIDO, and more.
Encryption is a way by which data is obscured so that only the sender and intended receiver can be read. Use someone's public key to encrypt a message, and use their private key to decrypt it. Examples: WhatsApp, i-message, Zoom(video) …
Learn more: OWASP top 100
There are tradeoffs between security and convenience. Take one of the distinct examples, if you choose a complicated password, it is probably hard to remember.
All pictures and material credit to CS50 staff