Explain like I'm five · Security

What is Least Privilege?

The principle of least privilege, told as a story about giving everyone in the castle only the keys they need.

KitchenStoreroomStudyVaultGateit's easier to carry them alla cook, with the vault key and the gate key tooone job in the kitchen, keys to the whole castle

The cook carries the key ring for the whole castle.Her one job is the kitchen. But the vault key and the gate key hang on the same ring. It's just easier.

huh? my key ring…oh! they all openStoreroomStudyVaultopenopenopenone ring lost, and every door opensthe more keys you carry, the more there is to lose

Lose the ring and every door opens. Not just the kitchen — the vault too.The thief wasn't after the kitchen. He just picked up a dropped ring — and the whole castle was on it.

exactly the key the job needs, one eachcook: kitchen keyclerk: study keyguard: gate keyvault key stays insideonly what's needed, only when needed, returned when notfewer keys means losing less when you lose them

Least privilege means giving only the keys the job needs.Only what's needed, only when needed, returned when not. Fewer keys means losing less when you lose them.

Only the needed keythe cook gets the kitchen
Only when neededborrow it, then give it back
Unused? take it backchecked every month
The vault key stays boxedno one carries it all day
until sunsetborrowing the storeroom key, today onlyback at sunsetMONTHLY KEY CHECKcook — kitchen ✓clerk — study ✓clerk — storeroom: unused 3 mo ×old guard — gate: gone ×unused keys go back on the hookborrow briefly, collect monthly

A key needed only today is borrowed briefly. And every month, unused keys are collected.A borrowed key wears a tag: until sunset. The ledger catches keys unused for three months and keys of people who left. Keys only ever pile up on their own.

got the cook's key! …the kitchen?KitchenopenStudylockedVaultlockedGatelockedthe thief gets exactly one kitchenlose a little, not everything — that's why only the needed keys

Even if the thief steals the key, all he gets is one kitchen.Split keys by hat, keep the vault key in the vault's own box, and ask again at every door — the thief has almost nowhere to go.

In one breath

Least privilege = give everyone only the keys their job needs, only when needed, and take back the unused ones. So that losing one loses little.

Give every user, program, and account only the minimum access its job requires. Excess privilege widens breach damage and gives privilege-escalation attacks a foothold. JIT access, role-based access control, and regular access reviews keep the principle alive.

When grown-ups say it

Principle of least privilege
Only the keys you need. Applies the same to people, programs, and service accounts.
Privilege escalation
From the kitchen key to the vault. A thief starts with one small key and hunts for bigger ones. Fewer keys, fewer places to go.
Over-privileged
More keys than the job needs. Nobody asks for a key back once it's given. That's why the check exists.
Just-in-time access
The key borrowed until sunset. Granted briefly when needed, returned automatically. → the master key in the vault
Role
The ring that comes with the hat. The cook's hat comes with the kitchen key only. → a key ring for every hat
Admin account
The ring for the whole castle. Never carried all day. Taken out only to fix things; the rest of the time, an ordinary key.
Access review
The monthly key check. Collects unused keys and the keys of people who left. → the castle's registry office
Zero Trust
Asking again at every door. Even with a key, every door checks again. Least privilege's partner. → the castle that asks at every door
Next story
The Postman Who Opens Your Letters →
Want another term as a picture book? Request →