Which password practice reflects best current practices for strong authentication?

Which password practice reflects best current practices for strong authentication?

• A. Using a password made up of multiple randomly chosen words with mixed case
• B. Using a single common word with a digit
• C. Reusing the same password across sites
• D. Choosing a very short password

Answer: (A)

Using a long passphrase built from several randomly chosen words with mixed case targets strong authentication by maximizing unpredictability while staying memorable. Each extra word adds many more possible combinations, so the overall password has high entropy, making brute-force or dictionary attacks far more difficult. Mixing uppercase and lowercase tips the scales further by expanding the search space beyond all-lowercase words. This approach is far more robust than using a single common word with a digit, which many attackers can guess quickly, or reusing the same password across sites, which risks widespread access if one site is breached. A very short password simply doesn’t have enough length to resist guessing. If you can, pair this with unique passwords for every site and consider a password manager to keep them secure and easy to use.

Using a long passphrase built from several randomly chosen words with mixed case targets strong authentication by maximizing unpredictability while staying memorable. Each extra word adds many more possible combinations, so the overall password has high entropy, making brute-force or dictionary attacks far more difficult. Mixing uppercase and lowercase tips the scales further by expanding the search space beyond all-lowercase words. This approach is far more robust than using a single common word with a digit, which many attackers can guess quickly, or reusing the same password across sites, which risks widespread access if one site is breached. A very short password simply doesn’t have enough length to resist guessing. If you can, pair this with unique passwords for every site and consider a password manager to keep them secure and easy to use.