--- title: How-to Talk About the End of Passwords in Infrastructure description: A Teleport Customer Success Engineer shares a framework for explaining password security to non-technical friends and family, using the Colonial Pipeline... canonical: https://daily.dev/posts/how-to-talk-about-the-end-of-passwords-in-infrastructure-m4euiguyo twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: How-to Talk About the End of Passwords in Infrastructure | daily.dev og:description: A Teleport Customer Success Engineer shares a framework for explaining password security to non-technical friends and family, using the Colonial Pipeline... og:url: https://daily.dev/posts/how-to-talk-about-the-end-of-passwords-in-infrastructure-m4euiguyo og:image: https://api.daily.dev/og/posts/m4EUIgUYo.png og:image:alt: How-to Talk About the End of Passwords in Infrastructure og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # How-to Talk About the End of Passwords in Infrastructure **[Teleport](https://daily.dev/sources/teleport)** · 7 min read · 0 upvotes · 0 comments ## Summary A Teleport Customer Success Engineer shares a framework for explaining password security to non-technical friends and family, using the Colonial Pipeline attack as a relatable example. The breach happened because an inactive VPN account had never-expiring access, a reused password, and no MFA. The piece then pivots to how Teleport addresses these three issues with short-lived certificates, RBAC, and mandatory MFA, and closes with general password hygiene tips like using a password manager, checking haveibeenpwned.com, and using MFA and SSO login options. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What security failures led to the Colonial Pipeline ransomware attack? Attackers used a single compromised username and password to access an inactive employee VPN account that had never been disabled. Contributing factors included access that never expired, password reuse (the credentials were later found on the dark web), and the absence of multi-factor authentication, which meant a single stolen password was enough to breach the network. _daily.dev surfaces real-world breach breakdowns like this for teams hardening VPN and access policies._ ### How does Teleport reduce the risk of stolen passwords in infrastructure access? Teleport replaces static passwords and SSH keys with identity-based, short-lived certificates combined with multi-factor authentication or single sign-on. Users authenticate once to Teleport and then access only the resources permitted by role-based access controls, and MFA setup is mandatory when a new user account is created, limiting the value of any single stolen credential. _Developers weighing passwordless access tools can track approaches like this via daily.dev._ ## Similar posts on daily.dev - [How to Evaluate Enterprise Passwordless Platforms](https://daily.dev/posts/how-to-evaluate-enterprise-passwordless-platforms-nbvfohr7c) · Security Boulevard · 0 upvotes · 0 comments - [Stop managing SSH keys on every server and switch to Teleport](https://daily.dev/posts/stop-managing-ssh-keys-on-every-server-and-switch-to-teleport-zoja48gov) · All Things Open · 0 upvotes · 0 comments - [Bridging the Gap Between Passwords and Passkeys with Risk-Based Authentication](https://daily.dev/posts/bridging-the-gap-between-passwords-and-passkeys-with-risk-based-authentication-eiq3iwdd6) · Mercari Engineering · 0 upvotes · 0 comments --- Tags: [#authentication](https://daily.dev/tags/authentication), [#vpn](https://daily.dev/tags/vpn) [View this post on daily.dev](https://daily.dev/posts/how-to-talk-about-the-end-of-passwords-in-infrastructure-m4euiguyo) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"How-to Talk About the End of Passwords in Infrastructure","url":"https://daily.dev/posts/how-to-talk-about-the-end-of-passwords-in-infrastructure-m4euiguyo","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/how-to-talk-about-the-end-of-passwords-in-infrastructure-m4euiguyo"},"datePublished":"2026-08-23T12:22:52.901Z","dateModified":"2026-08-23T12:48:39.947Z","description":"A Teleport Customer Success Engineer shares a framework for explaining password security to non-technical friends and family, using the Colonial Pipeline...","image":"https://media.daily.dev/image/upload/s--CxzD6vbw--/f_auto/v1722860399/public/Placeholder%2005","thumbnailUrl":"https://media.daily.dev/image/upload/s--CxzD6vbw--/f_auto/v1722860399/public/Placeholder%2005","isAccessibleForFree":true,"articleSection":"Teleport","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Teleport","logo":"https://media.daily.dev/image/upload/s--Dw-Bbw6O--/c_limit,w_256/f_auto,q_auto/v1787487494/logos/teleport?_a=BAMAMicg0","url":"https://daily.dev/sources/teleport"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/how-to-talk-about-the-end-of-passwords-in-infrastructure-m4euiguyo","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"authentication,vpn","timeRequired":"PT7M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Teleport","item":"https://daily.dev/sources/teleport"},{"@type":"ListItem","position":3,"name":"How-to Talk About the End of Passwords in Infrastructure"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/how-to-talk-about-the-end-of-passwords-in-infrastructure-m4euiguyo#faq","mainEntity":[{"@type":"Question","name":"What security failures led to the Colonial Pipeline ransomware attack?","acceptedAnswer":{"@type":"Answer","text":"Attackers used a single compromised username and password to access an inactive employee VPN account that had never been disabled. Contributing factors included access that never expired, password reuse (the credentials were later found on the dark web), and the absence of multi-factor authentication, which meant a single stolen password was enough to breach the network. daily.dev surfaces real-world breach breakdowns like this for teams hardening VPN and access policies."}},{"@type":"Question","name":"How does Teleport reduce the risk of stolen passwords in infrastructure access?","acceptedAnswer":{"@type":"Answer","text":"Teleport replaces static passwords and SSH keys with identity-based, short-lived certificates combined with multi-factor authentication or single sign-on. Users authenticate once to Teleport and then access only the resources permitted by role-based access controls, and MFA setup is mandatory when a new user account is created, limiting the value of any single stolen credential. Developers weighing passwordless access tools can track approaches like this via daily.dev."}}]} ```