# Passwords and two-factor authentication: holding your accounts

URL : https://skillrung.com/en/courses/cybersecurity/passwords-and-two-factor
Topic: Cybersecurity · Duration: 20-30 min · Updated on 2026-09-15

## In brief

A password stolen on an unrelated site opens your work mailbox if you reused it there. The defence holds in three habits: a long passphrase, different for every service, a manager to remember them for you, and a second factor on your email and banking access. That second factor does not protect against a code read out on the phone: it is shared with nobody.

## Programme

- 1. Why your accounts matter more than your antivirus : Understand what a reused password actually opens
- 2. Passwords and strong authentication : Build resistant passwords and switch on a second factor that actually helps
- 3. Your action plan : Leave with three habits you can apply to your accounts

1 content sections, each with its quiz. Three level quizzes: Beginner, Intermediate, Expert.

## Free preview (first 4 slides)

### 1. A leak elsewhere, an open door here

A service with no connection to your work has its passwords stolen. Yours is in there, and it looks like the one for the mailbox of your structure. Nobody needed to target you: it was enough to try the same combination elsewhere. It is the most travelled way in, and it calls for no technical skill at all.

### 2. What you will be able to do by the end

- Build a passphrase that you actually remember
- Switch on a second factor where it counts
- Recognise what that second factor does not protect

### 3. Four habits that make all the difference

None of them needs a paid tool or an IT department.
- A different password on every service, without exception
- A long phrase rather than a short word dressed up with symbols
- A manager to remember them in your place
- A second factor on your email and your banking access

### 4. Where do you stand?

One question to place your reflexes, with no score and no judgement. Answer before you carry on.
_Self-assessment of 1 questions in the player._

## Access

The first four slides of every course and the Beginner-level quiz are free, with no account. From the fifth slide onwards a subscription is required: €29.99/month incl. VAT, no commitment, cancellable online. skillrung is not a French training body certified under the Qualiopi scheme; its content is not eligible for the French CPF, OPCO or DPC schemes.

## Frequently asked questions

### Do I need technical knowledge to take this course?

No. Everything is explained through everyday actions: reading a message, choosing a password, plugging in a drive, calling the right person. No command line, no setting reserved for an IT department. The examples adapt to the job you indicate.

### My organisation is very small: am I really a target?

Yes. The vast majority of attacks target no one in particular: they cast a wide net and exploit whatever opens. A small organisation is often more exposed, for lack of an IT department and a verified backup.

### How does this course fit into the theme?

It is one step of the Cybersecurity theme. Each course is short and self-contained; the theme exam measures your level across all of them and issues a personal certificate.

## Sources

- Panorama de la cybermenace 2025 : ANSSI, 2026-03-11, https://cyber.gouv.fr/nous-connaitre/publications/panoramas-de-la-cybermenace/panorama-de-la-cybermenace-2025/
- Mots de passe : une nouvelle recommandation pour maîtriser sa sécurité : CNIL, 2022-10-14, https://www.cnil.fr/fr/mots-de-passe-une-nouvelle-recommandation-pour-maitriser-sa-securite