Quiz — Account Security
Quiz on passwords, two-factor authentication, and account recovery
Secure Your Accounts — Knowledge Check
You treated reuse as stuffing fuel, the master password as blast radius, 2FA as know + have (SMS weakest, TOTP and keys stronger), and recovery as a second authenticator that must not live in the same inbox. These ten APPLY scenarios test judgment on accounts you own. No pasting secrets. No number-hijack labs.
APPLY: A forgotten shop leaks email+password. You reused that password on mail. What happened, and what would have contained it?
APPLY: Why is a 20-character random manager secret generally stronger than P@ssw0rd! with clever substitutions?
APPLY: Your master password is also your shopping-site password. What is the blast-radius problem?
APPLY: A teammate asks you to paste passwords into chat so they can "rate strength." Correct move?
APPLY: True or False: SMS 2FA is "something you have" as strongly as a hardware key, because both arrive on physical objects.
APPLY: You are enabling 2FA on mail you own. Which pair belongs in the same setup session? (Select 2)
APPLY: A lookalike login page asks for password plus a 6-digit code. Which factor is most phishing-resistant if you used it instead of typing a code?
APPLY: Backup codes live as a Gmail draft in the mailbox they protect. Why is that not "offline"?
APPLY: Security question is "mother's maiden name," which appears in a public family tree post. Best answer strategy on an account you own?
APPLY: After this module, which next lesson continues the client-side privacy work you started with cookies?