Everyday threatsChapter 5

Passwords, MFA and passkeys

Why passwords fail, what France’s CNIL and ANSSI recommend, password managers, MFA and passkeys: a practical action plan to protect a small business’s accounts.

Belinda
Presented byBelinda
11 min readUpdated on 2 October 2026

What you will learn

  • How passwords get stolen: data breaches, credential stuffing, infostealers, phishing
  • How to apply the recommendations of France’s CNIL and ANSSI: length, entropy, renewal
  • How to choose and roll out a password manager
  • The types of MFA, from SMS to FIDO2 keys, and their limits against MFA fatigue and AitM attacks
  • What passkeys are, and a realistic action plan for a small business

Free chapter with your account

Chapter 1 is free to read. Chapters 2 to 21, like the Junior, Senior and Expert levels of the Cyber Quiz, are free too: all you need is a free KrakenShield account with a confirmed email address.

Checking your access…

From theory to practice

So how does your system measure up?

Create your account and get an A+ to F grade for your domains’ encryption in minutes, with every finding explained and the fix to apply.

Run the audit from your account: an A+ to F grade for your domains’ encryption in minutes, with every finding explained and the fix to apply.

Belinda

Contact us

A question, a project, a partnership? Write to us: the team answers by email, usually within one business day.

Your details are only used to answer you. Do not include passwords or vulnerability details.