IAS - 113

Providing masked entries like dots or asterisks for passwords

• assist the users in securing the password entry from admins

• helps secure the password from onlookers

• is necessary so that they cannot be copy-pasted

• may provide a clue as to the length of the password

In the perspective of brute force attack algorithm, which is the strongest password?

• abcdefghijklmnopqrstuvwxyz

• Secret123

• passwordKoToh

• #123456aBCDe

The most common problem with remember password features

• security issue

• privacy issue

• very prone to hacking

• makes users lazy to memorize passwords

The show password feature on mobile-based apps is a means for users

• to be aided on the accurate entry of passwords since small electronic screens are quite prone to typing errors

• to see what they are typing as passwords in real time

• to verify whether the users typed the correct password

• to screenshot the shown password

Requiring passphrases instead of passwords

• increases the risks of legitimate users not able to log in

• decreases the tendency for others to attempt

• would be a tremendous problem for database operations

• identifies a human user from a non-human user

The show password feature on desktop-based apps is a means for users

• to be aided on the accurate entry of passwords

• to see what they are typing as passwords in real time

• to correct the password being entered

• to verify the password against the database

The re-type password feature in data registration entries

• ensures correct format of passwords

• requires users another password

• checks users of their password entries via match-up with the first password

• shows the users what they are typing as passwords

Password hints are provided to help users

• forget their passwords

• type their passwords

• regain their passwords

• see their passwords as they type

When users forget their passwords, they may resort to utilizing the security questions

• to retrieve the password

• to have another means of logging in to the system

• to block all possible attempts to log in by other users

• via answering the questions that should not match the registered answer

Common problem/s with two-factor verification

• lost or stolen devices

• email verification requires access to email

• OTPS are subject to phishing

• unavailability of the other authentication factor