OBJECTIVE

Assess a fictional organization's password and recovery rules against practical risks.

TIME PLAN

Prepare 20m · Build 110m · Verify 30m · Document 20m

Working boundary

Work only inside the folder created by Smartphone-Academy.py prepare password-policy. Use the supplied samples or systems you personally administer.

Prepare the Termux workspace

Open Termux in the Academy root and prepare this lab with the local companion. It creates safe samples, notes and evidence files under your Termux account.

Android + Termuxpython Smartphone-Academy.py prepare password-policyNo root. Use the supplied files and keep the workspace under $HOME.

Practical mission

  1. Identify rules that encourage predictable user behavior
  2. Add protections for recovery and privileged accounts
  3. Define how password managers and MFA fit the policy
  4. Create a migration checklist that avoids locking users out
EVIDENCE TO PRODUCE

A revised policy with rationale, exceptions and rollout checks.

Quality gate

The deliverable states a clear scope and date for Evaluate a Password Policy.
A second learner can reproduce the commands and paths.
Original samples remain unchanged and verifiable.
Limitations are recorded beside the conclusions.

Analyst reflection

Which result from “Create a migration checklist that avoids locking users out” would need more evidence before it could support an operational decision?

Complete in Termux

After checking the evidence, run python Smartphone-Academy.py complete password-policy. Progress is stored locally in the Termux home directory.

15 · Identity & Hardening

Continue learning

Back to Smartphone Academy