# Is my account safe?

Learner worksheet · noobquestions.com/teach/#accounts

Name: ____________________

Answer in your own words. A wrong guess is fine — it is where the lesson starts.

1. Before the lesson: if someone learned your password, what could stop them?

   ______________________________________________

   ______________________________________________

2. In the MFA model, the visitor has the correct password. Can they sign in with the password alone? Why?

   ______________________________________________

   ______________________________________________

3. A service asks for a password and then a memorised PIN. Is that necessarily multi-factor authentication? Explain.

   ______________________________________________

   ______________________________________________

4. Name two kinds of factor that are not something you know.

   ______________________________________________

   ______________________________________________

5. Why should you set up account recovery before you need it?

   ______________________________________________

   ______________________________________________

6. Jamie only needs to read the notes. Which role fits, and why not a bigger one?

   ______________________________________________

   ______________________________________________

7. Exit question: what is the difference between signing in and being allowed to do something?

   ______________________________________________

   ______________________________________________

Lessons:
- What does HTTPS protect? A padlock is not a trust guarantee: https://noobquestions.com/https-explained-a-padlock-is-not-a-trust-guarantee/
- Why does MFA help when a password is stolen?: https://noobquestions.com/why-mfa-helps-when-a-password-is-stolen/
- Read, edit, or admin? Permissions explained with a shared notebook: https://noobquestions.com/read-edit-admin-permissions-explained/