SEC504: Hacker Tools, Techniques, and Incident Handling

Experience SANS training through course previews.
Learn MoreLet us help.
Contact usConnect, learn, and share with other cybersecurity professionals
Engage, challenge, and network with fellow CISOs in this exclusive community of security leaders
Become a member for instant access to our free resources.
Sign UpMission-focused cybersecurity training for government, defense, and education
Explore industry-specific programming and customized training solutions
Sponsor a SANS event or research paper
We're here to help.
Contact UsFollow these simple but powerful practices to help you level up your password game.
Passwords are the broccoli of the internet. We know they’re good for us, but we still hate them. They’re a pain to remember, we have too many of them, and just when we come up with one we actually like, some website tells us it’s not secure enough because it doesn’t contain an uppercase letter, lowercase letter, symbol, number, and a strand of unicorn hair.
But here’s the deal: passwords matter, a lot. They’re the front door keys to your digital life: your bank, your email, your social media, or favorite shopping sites. If your passwords are weak or reused, it’s like leaving your keys in the car ignition with a “please steal me” sign on the dashboard.
Here are three simple but powerful practices to help you level up your password game:
Think of it like a secret handshake with every site. The longer the password, the better. We recommend using passphrases—passwords made up of random words. Something like birds-clover-windy-breath.
In addition, make sure each account has a unique password. Can’t remember all those unique passwords? Password managers to the rescue.
Seriously. You don’t need to memorize all your passwords. Let a password manager do all the work for you.
Password managers act like a secure vault: they remember your passwords, create strong passwords for you, login you in, validate websites, and much more. The latest versions offer family accounts, enabling you to secure all your loved ones too.
MFA is like putting a deadbolt on your already locked door. Even if someone gets your password, they still can’t get in without your second factor—usually a text message, an app prompt, or a biometric check.
It’s one of the easiest ways to dramatically increase your security.
Final Action: Your Password Spring Cleaning
These basics may not be flashy, but they work. Like flossing or wearing sunscreen, they quietly protect you every day. Since it’s Password Day, here are a couple of additional steps to help protect you for the rest of the year:
You’ve got this. Passwords don’t have to be a pain—they just need a little love and attention.
Passwords matter every day—not just on World Password Day. Stay ahead of cyber threats year-round with the free OUCH! newsletter. Sign up now for monthly tips to keep yourself safe online.
Lance revolutionized cyber defense by founding the Honeynet Project. Over the past 25 years, he has helped 350+ organizations worldwide build resilient security cultures, transforming human risk management into a cornerstone of modern cybersecurity.
Read more about Lance Spitzner