Exploring passwords and passphrases
When talking about identity security, there is one principle you always have to keep in mind: assume breach. The question is not whether your accounts are attacked but whether you know about it and whether you can prevent attackers from being successful. We can already see that there are many successful attacks against cloud identities every day. There is no single solution for protecting your identities, but you need to leverage a broader toolset to be resilient against identity attacks.
Important Note
The question is not whether your cloud identities are under attack, but whether you can ensure that attackers are not successful.
If we start with passwords, you could say that no one likes them. Well, attackers do, because passwords often give them leverage for an upcoming identity-focused attack attempt. Given the fact that people tend to create their passwords based on their life experiences, an attacker generally needs to be good at gathering...