# Chapter 10: Password Management and Multifactor Authentication

See also: [Identity and Access Management (IAM)](../💡Drafts%20and%20Ideas/Identity%20and%20Access%20Management%20(IAM).md), [Roles in Identity and Access Management (IAM)](Roles%20in%20Identity%20and%20Access%20Management%20(IAM).md)

## Password practices
Password complexity and brute force cracking:
* 8 characters at only lowercase equals 26 ^ 8. Extremely easy, will crack in < 2 minutes. 
* 8 characters at upper-and lowercase equals 52 ^ 8. Still not the best, will crack in < 6 hours. 
* 8 characters at uppercase, lowercase, and numbers equals 62 ^ 8. A little better, will crack in < 24 hours. 
* 10-character passphrase with uppercase, lowercase, numbers, and symbols 94 ^ 10. Approximately 600 years.

Tools and password dictionaries (comprised from most used passwords obtained from previous hacks) are readily available on the Internet.

