Legal Considerations

Before we get started, it is necessary to understand that your online exploits are subject to legal ramifications. We will cover legal considerations to clarify what passwords you can use to practice cracking, whether in this course or elsewhere.

The most important consideration is that you cannot attack systems, passwords, and accounts without permission. For example, you are not allowed to hack a stranger’s email account or social media profiles. 

Let’s take a closer look at what permission means in this context. For example, can you attack your own Facebook, Instagram, or Twitter account password? The answer is no. You cannot attack your own social media profiles because these exist on a company’s system that you don’t own.

What about leaked password dumps? This is a bit of a grey area, but it is recommended that you do not attack leaked password dumps. However, you may attack password dumps that are part of a penetration test, if it’s part of your client’s scope. 

What you can attack and crack are self-made hashed passwords and the passwords that will be provided in this course. All the passwords and hashes in this course can be used to practice your cracking skills.

Have your say: Have you ever been granted permission to crack a password? Share your experience with fellow learners in the Comments section.