Cybersecurity Awareness Month 2026
Week 1
Score Big With Strong Passwords
Password Management, MFA, and Passkeys
Expand the sections below to learn more.
Malicious actors can use AI to test thousands of password combinations every second.
If you're still using short or reused passwords, it's time to switch to a password
manager.
A password manager securely stores your usernames and passwords in an encrypted vault
and can generate strong, unique passwords for each account. You only need to remember
one master password to access your vault.
Pro Tip: Your vault password is the key to all your accounts. Make it long (15+ characters),
unique, and difficult to guess.
- Automatically fills in login credentials
- Works across most devices and operating systems
- Stop recycling passwords by easily creating strong, unique passwords
- Warns about potential phishing websites
- Alerts you to potentially compromised passwords
- Some support multi-factor authentication for added security
Password managers are one of the safest ways to store credentials and are far more
secure than notebooks, notes apps, browser-based storage, or reused passwords. While
no solution is risk-free, a reputable password manager significantly improves your
security.
Look for the following features:
- Zero-knowledge architecture: Your data is encrypted on your device. This means that the provider has no knowledge of your passwords or information. Only you can unlock your vault.
- Multi-factor authentication (MFA): Adds an extra layer of protection.
MFA adds an extra layer of security by requiring two or more forms of verification,
such as a password, PIN, biometric scan, or security code/tokens.
MFA is one of the most effective ways to protect your accounts. Even if a password
is compromised, an attacker cannot gain access without the additional verification
factor. Whenever available, enable MFA on personal accounts such as Google, Amazon,
and social media platforms.
Stay Alert: Never approve an MFA request you did not initiate and never share MFA verification
codes with anyone.
MFA at LSU: MFA is available for LSU services that use Microsoft authentication, including Workday,
Outlook, Teams, Box, and Zoom. Configure both a primary and backup authentication
method and, when possible, enroll multiple devices to avoid being locked out.
Looking ahead: Beginning in early 2027, Microsoft will be phasing out the phone-call authentication
method. If you currently use this method, consider switching to a passkey for a more secure and convenient sign-in experience.
Passkeys provide a secure way to sign in without typing a password. When you create
a passkey, your device generates a public key that is stored by the website and a
private key that remains securely on your device. To sign in, you authenticate using
a fingerprint, Face ID, PIN, or another device unlock method.
Why are passkeys more secure?
Because your private key never leaves your device, it can't be stolen in a data breach
or easily intercepted by attackers. This makes passkeys significantly more resistant
to phishing and credential theft than traditional passwords.
Protection Against Fake Websites
One of the biggest advantages of passkeys is that they are cryptographically bound
to the website they were created for. If you accidentally click a link to a fake website
designed to look like your bank, email provider, or favorite online store, your passkey
won't work because the domain doesn't match the legitimate site.
This built-in protection helps prevent phishing attacks by stopping you from unknowingly authenticating to an imposter website, even if the fake page looks identical to the real one.
Are Passkeys Replacing Passwords?
While passkeys are becoming more common, many websites still rely on passwords. That's
why using a password manager remains a smart way to secure your accounts.
Take the next step: If your favorite websites or apps offer passkeys, consider enabling them for a more
secure and convenient sign-in experience. Check out the additional resources to learn
more about how passkeys can help protect your online accounts.
Put your knowledge to the test, unlock coordinates, and search campus for QR codes
for a chance to win stuff! Take this week’s quiz!
Prefer a digital challenge? Try our new virtual escape room!
(Please note: participation in the virtual escape room does not qualify for the drawing.
Players must complete the geocache to be eligible to win.)