Mechanisms to avoid weak Passwords Allow long passphrases, forbid short passwords Randomly generate passwords when appropriate Give user suggestions/guidelines in choosing passwords Example: Think of a sentence and select letters from it, It's 12 noon and I am hungry"=>"IS12&AH Using both letter, numbers, and special characters Check the quality of user-selected passwords Run dictionary attack tools and other sanity checks Evaluate strength of a password and explain the weaknesses 40 Active research areaMechanisms to Avoid Weak Passwords • Allow long passphrases, forbid short passwords • Randomly generate passwords when appropriate • Give user suggestions/guidelines in choosing passwords • Example: Think of a sentence and select letters from it, “It’s 12 noon and I am hungry” => “I’S12&IAH” • Using both letter, numbers, and special characters • Check the quality of user-selected passwords • Run dictionary attack tools and other sanity checks • Evaluate strength of a password and explain the weaknesses • Active research area Topic 3: User Authentication 402/3/2021