Ravi Sir's Cyber Security Cards › Revision Cards
A07 Authentication and A02 Cryptographic Failures
A07 Authentication and A02 Cryptographic Failures A07 : login weaknesses. A02 : weak or missing encryption. Strong passphrases, lockout and MFA . Change the session ID at login, expire sessions, and don’t reveal whether a username exists. Use HTTPS (TLS 1.2+). Hash passwords with a slow, salted algo
Read card text
What this card says
What it is
A07: login weaknesses. A02: weak or missing encryption.
Login fixes
Strong passphrases, lockout and MFA.
Change the session ID at login, expire sessions, and don’t reveal whether a username exists.
Crypto fixes
Use HTTPS (TLS 1.2+).
Hash passwords with a slow, salted algorithm like bcrypt. Never store secrets in plain text.
Learn more in the lesson: 29.6 A07 Authentication and A02 Cryptographic Failures