Cybersecurity Awareness: Password Security and Authentication
58mBeginner2026-07-15
Authors

Caroline Wong
Vice President of Cobalt.io
Course details
Passwords and authentication remain one of the most common ways attackers gain access to accounts, systems, and data. In this course, cybersecurity expert Caroline Wong covers why weak passwords and poor credential habits continue to drive security incidents, even in organizations that have strong technical controls. Discover practical guidance on password best practices, password managers, multifactor authentication, passkeys, and more. Along the way, Caroline focuses on real-world behavior, not technical theory, so you can apply what you learn immediately at work and at home. By the end of this course, you’ll be equipped with the skills you need to protect your accounts and reduce everyday authentication risk.
Learning objectives
Explain why passwords and authentication are a primary target in modern cyber attacks.
Identify common password and credential behaviors that increase security risk.
Apply modern password best practices, including the safe use of password managers.
Describe how multifactor authentication and passkeys protect accounts and reduce phishing risk.
Practice basic credential hygiene and know what actions to take if an account may be compromised.
Learning objectives
Explain why passwords and authentication are a primary target in modern cyber attacks.
Identify common password and credential behaviors that increase security risk.
Apply modern password best practices, including the safe use of password managers.
Describe how multifactor authentication and passkeys protect accounts and reduce phishing risk.
Practice basic credential hygiene and know what actions to take if an account may be compromised.
Concepts
Introduction
- Welcome to the course
Why Passwords and Authentication Matter
- Why attackers go after passwords first
- How stolen credentials power real-world breaches
- Why security breaks down when logins are weak
How Passwords Fail in the Real World
- Why password reuse is so dangerous
- How phishing leads to stolen credentials
- Credential stuffing and automated attacks explained
Creating Strong and Usable Passwords
- What makes a password strong today
- Length vs. complexity - What actually matters
- How to create passphrases you can remember
Password Managers - What They Are and How to Use Them
- What a password manager does and how it works
- Creating and protecting your master password
- Browser password storage vs. dedicated password managers
Multifactor Authentication Explained
- What multifactor authentication is and why it works
- Comparing MFA methods - Apps, SMS, hardware keys, and biometrics
Passkeys and Passwordless Login
- What passkeys are and how they work
- How passkeys prevent phishing attacks
- Using passkeys across devices safely
Everyday Credential Hygiene at Work and at Home
- Everyday habits that protect your accounts
- Recognizing credential phishing and login scams
Handling Security Incidents
- Signs your account may be compromised
Conclusion
- Next steps