Not just Strong but also Practicable
Jodi Daniels’s Data Privacy Highlights newsletter drove me to write this comment — https://www.linkedin.com/pulse/data-privacy-highlights-jodi-daniels-1f
Recommended in the article are ‘Use Strong Passwords’ and ‘Enable Multi-Factor Authentication’
In order to further the discussion, I would like to add more adjectives to them — ‘Use Strong and PRACTICABLE (*1) Passwords’ and ‘Enable MULTI-LAYER (*2) Multi-Factor Authentication (MFA)’
*1 ‘Strong’ passwords re-used across many accounts or carried around on memos/devices are actually far from strong. For being truly strong, it should be PRACICABLE.
*2 MFA deployed in ‘MULTI-ENTRANCE’ formation (as against multi-layer) would only bring down security.
For Strong & Practicable passwords, you could refer to “Mathematical Strength of Login Credential” https://www.linkedin.com/posts/hitoshikokumai_slack-exposed-hashed-passwords-for-years-activity-6963379792599535616-V6wh
For not seeing security lowered by MFA, you could refer to “Hopefully, ‘Multi-Entrance’ MFA is Not Allowed There” https://www.linkedin.com/posts/hitoshikokumai_aws-focuses-on-identity-access-management-activity-6961597567126188032-gtv8
Website — https://www.mnemonicidentitysolutions.com/
Digital identity blogs collected at https://www.linkedin.com/pulse/collection-digital-identity-comments-hitoshi-kokumai-posted-kokumai/