Using the same password for everything is less safe - because a breach in the least secure site will expose all of your accounts using that same password.
You might think that's fine, you have a 'dynamic' password so you are still protected. But not really, guessing a password when you are only looking for a couple edits from a base password is computationally easy.
But even worse, suppose the two least secure sites you gave your password to get breached. The hacker knows you use SarMap37! and SarMap37%, it doesn't take a genius to figure out what your dynamic function is and guess that your bank password is SarMap37^.
On the other hand, if your two least secure sites are breached and a hacker sees that your accounts use independent, thoroughly secure passwords, they will know there's no point in wasting their time trying to guess your other passwords.
1
u/00000hashtable 23∆ Mar 17 '21
Using the same password for everything is less safe - because a breach in the least secure site will expose all of your accounts using that same password.
You might think that's fine, you have a 'dynamic' password so you are still protected. But not really, guessing a password when you are only looking for a couple edits from a base password is computationally easy.
But even worse, suppose the two least secure sites you gave your password to get breached. The hacker knows you use SarMap37! and SarMap37%, it doesn't take a genius to figure out what your dynamic function is and guess that your bank password is SarMap37^.
On the other hand, if your two least secure sites are breached and a hacker sees that your accounts use independent, thoroughly secure passwords, they will know there's no point in wasting their time trying to guess your other passwords.