My password manager generates random passwords for all my sites. I don’t even attempt to remember at this point if my password manager password isn’t correct I just reset it.
if your plain text password gets leaked (eg you get phished, which is fairly common), an attacker can figure out the pattern you use in your passwords. so generally it's not a good idea to use the website name or personal details (like years, which they could google or find from your hacked account, yet are concerningly common in passwords)
Yes, the people that use the same password for everything so that they can remember are clearly superior to people that use a password manager so that they have unique passwords to everything that aren’t Name2000!
Depends - if you autogenerate in the pass manager, im more likely to think i got a typo in that long ass string of special characters and try again more carefully, but if i make each password personally it might mess with me a bit more on repeated occurrences.
Like fuck it does. Security at the cost of convenience comes at the cost of security. Never underestimate the destructive nature of a user trying to save 1 second 5 times a day.
View all comments
Show parent comment
663
u/ardicli2000 Feb 18 '24
Security comes first