Passwords are such a central focus of social engineering attacks that we devote a separate section to the topic in Chapter 16 , where you will find specific recommended policies on managing passwords.