Lion Cipher Lab
Lock down your accounts: a password manager and MFA
- Foundations
- Beginner
- ~40 min
- Free · no account required
Why it matters
The accounts you already have are the realistic thing an attacker goes after, and the two changes in this lab close the two biggest doors. Reused and weak passwords mean one leaked site hands an attacker the keys to dozens of your accounts through credential stuffing; a password manager ends reuse by giving every login its own long, random password you never have to remember. Multi-factor authentication then adds a second lock, so a stolen password alone is no longer enough to get in. This is not theory you file away for a future job — it is protection you switch on today, on your own email,…
What you'll learn
- password managers
- generating strong unique passwords
- multi-factor authentication (MFA)
- authenticator apps vs SMS
- passkeys
- account recovery basics
Steps in this lab
- Why a stolen password anywhere puts you at risk everywhere
- Install a reputable password manager
- Generate one long, unique password and save a real login
- Turn on multi-factor authentication — start with your email
- Pick the strongest second factor: app or passkey over SMS
- What you just did — and why it's the habit that sticks