Explore the world
of cyber security

More than a Password Day 2024

OWASP is securing the web! Enable MFA today!

Please follow the instructions in the More than a Password Day 2024 news article to enable multi-factor authentication on your OWASP account.

Use password-free authentication

Simpler to use and far more secure than passwords, passkeys use cryptographic to prove that you are you.

Secure your email account

Email is the most common form of resetting your password. Add extra security to deter access to your accounts:

• Strong password (long, randomly generated and unique)
• Multi-factor authentication / two-step verification

Add layers of security

Additional security measures can help prevent phishing and other attacks, if used in addition to your password.

• A hardware security key (or token)
• An authenticator app

Use a password manager

• Using a password manager means you can use strong, randomly generated, harder to guess passwords.
• Use a strong, memorable password manager password.

Use a technique or passphrases to pick passwords

• Use “three random words” or passphrases to pick passwords that are easier to remember but hard to guess.

Hacked? Move fast to change passwords

Your passwords should be changed immediately if:

• One of your devices is compromised
• If an online site or service you use is hacked

Using random unique passwords with a password manager means you only need to change breached passwords. Many password managers can help you identify which passwords need changing.

More than a Password Day 2024

OWASP is securing the web! Enable MFA today!

Please follow the instructions in the More than a Password Day 2024 news article to enable multi-factor authentication on your OWASP account.

Use password-free authentication

Simpler to use and far more secure than passwords, passkeys use cryptographic to prove that you are you.

Secure your email account

Email is the most common form of resetting your password. Add extra security to deter access to your accounts:

• Strong password (long, randomly generated and unique)
• Multi-factor authentication / two-step verification