To continue with this content, please log in with your Data Access ID or create a new account.
Cancel Data Access ID
You may not be authorized to see this content. Please contact Data Access Europe for more information.
Cancel Data Access Europe
You are not authorized to see this content.
Cancel Data Access Europe
Next lesson:
Authentication 2FA (Web, seclib)

Security the Basics

Lesson 18: Authentication – Stronger Passcodes

Users often choose bad passcodes. There are certain things that can be done to force them to create stronger passcodes. Examples would be requiring a minimum length and checking passcodes against databases of leaked codes. There are several resources on the internet for checking for leaked codes, but one of the most common is This site has a file that can be downloaded that contains over five million breached codes. 

A file has been added to the workspace that contains the first 100,000 most commonly used passcodes from                 

To import the password hashes from Select ‘PwnedPasswordsImport.src’ as the current project in the ‘Workspace Explorer’ on the right and run it. 

Next open the pwned file from the root directory of ‘SecurityMatters.’ 

Viewing the table from the SQL Server Management Studio shows the type of data it contains: the binary hashes and their frequency. 

CHALLENGE – whenever someone changes their passcode, create a sha1 hash, and check it against the list, and if it is included deny them the use of the code.