In this password security training you learn how attackers get into accounts and the few habits that keep them out: long passphrases, one password per account, a password manager and two-step sign-in. You try each idea with made-up passwords before it is explained.

Most break-ins don't need clever hacking. Breach reports such as Verizon's yearly Data Breach Investigations Report list stolen credentials, a user name and its password, among the most common ways attackers get in.

Try it: press Start guessing and watch which password falls first.

In this lesson you'll:

• see the four ways passwords are really stolen, and what stops each one
• measure how long a password takes to crack, and why length beats symbols
• make a passphrase, and let a password manager handle the rest
• pick the second sign-in step that stops the most attacks, and know what to do when a password leaks

It takes about 55 minutes, with a quiz in the middle, a practice round and a final quiz.

Takeaway: a password that follows a pattern falls fast, however complex it looks.