4 ms·
I kind of feel like all these passwords schemes and discussions about password strength fundamentally miss the point. Password reuse is the single greatest thre
by slavik81 11y ago
I kind of feel like all these passwords schemes and discussions about password strength fundamentally miss the point. Password reuse is the single greatest threat that any user faces. Nobody's going to guess your gmail password, even if its just six random lowercase letters. They're going to get it from a database dump of a compromised site where you reused that password.
I have well over a hundred websites listed in my password manager. There is not a chance that I could remember a unique password for every one of them, no matter how easy they were.
- k__ 11y agoWouldn't it be then enough to just simply use a unique scheme? I mean if noone will guess your password and just use possible DB dumps, this would be more than enough: G#00gl3 A#m4z0n F#4c3b00k ...
- rakoo 11y agoIf a human can see one of your passwords, it's extremely easy to crack the other ones, no matter H0w m4ny tricks you try to use.
- slavik81 11y agoIndeed. That's not just theoretical danger either. Attackers will guess obvious patterns or simple variations on known passwords. https://www.guildwars2.com/en/news/mike-obrien-on-account-security/ https://www.guildwars2.com/en/news/mike-obrien-on-account-se...
- k__ 11y agoI know, but the OP said DB dumps are the biggest problems, not the password strength or if someone sees me typing it
- slavik81 11y agoEven that ridiculously weak password scheme would probably stay secure until there were a few DB dumps. Then you'd be screwed for reusing the same password scheme across multiple sites. That was sort of my point: reuse is the enemy.