Which statement reflects password hygiene best practice?

Which statement reflects password hygiene best practice?

• A. After a major breach, rotate all passwords.
• B. Reuse across sites.
• C. Never use MFA.
• D. Use unique, strong passwords, avoid reuse, enable MFA, and rotate if compromised.

Answer: (D)

Password hygiene means managing credentials in a way that minimizes risk across accounts. The best practice is to use unique, strong passwords for each site, avoid reusing passwords, enable multi-factor authentication, and rotate a password if you know or suspect it was compromised. This approach limits the damage a breach can cause: unique passwords prevent a breach on one site from giving access to others, strong passwords resist guessing and stuffing, MFA adds a second barrier beyond the password, and rotating when compromised narrows the window attackers can exploit. Other options fall short because rotating all passwords after a breach is usually unnecessary and disruptive for accounts not affected, reusing passwords creates a single point of failure, and never using MFA drops a critical security layer.

Password hygiene means managing credentials in a way that minimizes risk across accounts. The best practice is to use unique, strong passwords for each site, avoid reusing passwords, enable multi-factor authentication, and rotate a password if you know or suspect it was compromised. This approach limits the damage a breach can cause: unique passwords prevent a breach on one site from giving access to others, strong passwords resist guessing and stuffing, MFA adds a second barrier beyond the password, and rotating when compromised narrows the window attackers can exploit. Other options fall short because rotating all passwords after a breach is usually unnecessary and disruptive for accounts not affected, reusing passwords creates a single point of failure, and never using MFA drops a critical security layer.