> treat it as a reminder that your data is out there circulating around and that you need to go and get yourself a password manager and create strong, unique pa

> treat it as a reminder that your data is out there circulating around and that you need to go and get yourself a password manager and create strong, unique passwords. I think that the real solution to the problem is not to tell people to use password managers, but to make it easy for people to do so. Unless they've been pwned, the person you're trying to convince probably doesn't prioritize password security during account creation. They just want to make an account. Telling them to do so with no other reason than "don't endanger yourself like everyone else!!" might not have the best success. Meanwhile, when Google Smart Lock (Google's password manager) was built into Chrome, Now suddenly people who would never think about installing a password manager is using a password manager. It became the default option. But the security of password managers comes from secure password generators, and Chrome does not provide this by default; it exists under `chrome://flags`. And no one I know uses this. Even the effort of changing a single flag is too much to ask people to do! There is a similar story for Safari -- one needs to enable iCloud Keychain Support to generate passwords. (*EDIT: this is false, it is enabled by default!!) And while Firefox can store passwords, it has no built-in password generator. There are many great Firefox add-ons, but then we are back to our original problem of convincing others to actually install and use them. Now, consider that, just like password storage, password generation was default. I'd argue that if password generation was also default, /people will use it/. Instead, rather than go the path of default built-in password generators, browsers -- recklessly blind to the discussed issue of password reuse -- recommend 'secure' passwords like "#Hihas4ei:YtB"[1] and "sPo0kyh@ll0w3En"[2]. Security shouldn't be a question of convincing others. It should be a default option. [1](https://support.mozilla.org/en-US/kb/create-secure-passwords-keep-your-identity-safe https://support.mozilla.org/en-US/kb/create-secure-passwords...) [2](https://support.google.com/accounts/answer/32040?hl=en https://support.google.com/accounts/answer/32040?hl=en)