From passwords to identity security
Move from everyday sign-in to sessions, tokens and investigative questions.
14 lessons · Approximately 76 minutes · Learn at your pace
Before you start: Password Strength Explained, HTTP and HTTPS Explained
- Password Strength ExplainedUnderstand why length, uniqueness and predictable choices matter more than a decorative symbol.6 minLesson
- OTP: A Small Code That Can Open an AccountUnderstand one-time codes, unexpected requests and why a code is never a harmless message.4 minLesson
- How to Use an Authenticator App SafelyLearn what rotating codes do and plan recovery before changing your phone.4 minLesson
- How MFA WorksSee why a stolen password is less useful when a second, independent factor protects the account.6 minLesson
- Passkeys Without the JargonSee how your device can sign you in without sending a reusable password.4 minLesson
- Authentication vs AuthorizationIdentity answers who is making a request. Authorization decides whether that identity may perform this action.6 minLesson
- Cookies and SessionsSee how an HTTP cookie can connect separate requests to server-side session state.6 minLesson
- JWT ExplainedInspect the header, claims and signature of a token—and see why decoding is different from trusting.6 minLesson
- OAuth ExplainedFollow delegated access from a client to an authorization server without sharing the user’s password.6 minLesson
- Think Like an Analyst: Triage a Sign-in AlertWork through fictional evidence, competing explanations and a justified next action.7 minLesson
- Give Each Account Only the Keys It NeedsConnect access scope, task duration and review to a familiar workplace example.6 minLesson
- Recovery Codes: Your Spare Way InPrepare an alternative sign-in method before your usual second factor becomes unavailable.5 minLesson
- Which Apps Still Have Access to Your Account?Review old app connections and understand what removing access does and does not undo.5 minLesson
- When Your Phone Number Moves Without YouRecognize an unexpected number transfer and act through your mobile carrier’s verified channels.5 minLesson
Bring it together
Explain one idea from this path in your own words. Revisit any lesson that still feels uncertain; completion is your choice, not a timer.
Review your learning · Choose another path