Password length vs complexity isn't a close call. Dr. Mike Saylor joins Curtis and Prasanna to explain why the capital letter, the number, and the special character your bank demands do less for you than simply adding characters.
Mike walks through the rainbow table project — an operation that has spent years computing password hashes nonstop and will sell you 20 terabytes of the results. Nobody cracks your password. They look it up. The catch is that after all those years, the project has only reached ten characters.
We also cover why some LastPass customers had their vaults drained and others didn't, where the 16-character recommendation comes from, how to build a passphrase you'll actually remember, whether forced rotation does anything but annoy people, and what happened when Mike deployed fingerprint-locked laptops to fifty field employees.
Get the book: Learning Ransomware Response and Recovery
