3 ms·
>People can't barely manage passwords, they can't manage them at all. This is like walking in a room, seeing a tiny speck of red paint on the wall and saying t
by vortico 9y ago
>People can't barely manage passwords, they can't manage them at all.
This is like walking in a room, seeing a tiny speck of red paint on the wall and saying that the wall is painted red.
Virtually everyone who owns a computer uses passwords, and probably 0.1-1% use a password manager. The others manage the passwords with memorization or post-it-notes just fine. Sometimes they forget, but email password resets solve that problem.
They're not trivial for developers, but you shouldn't care about that. You should care about the end result and UX.
Passwords are simple. No alternative is better because it's a solved problem. End of story.
- beaconstudios 9y agoMore users will use password managers if you include those who use browsers' "remember my password for this site" functionality.
- type0 9y agoEven better, ship it with operating system like so: https://www.engadget.com/2017/12/16/windows-10-bundled-password-manager-had-security-flaw/ https://www.engadget.com/2017/12/16/windows-10-bundled-passw... /s
- zeveb 9y agoI think part of his point is that memorization & post-it notes are improper ways to manage passwords. In general, a password one can memorise is too low-entropy to be used — and I think we all agree that writing passwords down is just terrible. And email resets have their own failure modes. For one things, it gives your email provider access to all your email-resettable accounts.
- maxerickson 9y agoWriting passwords down is fine, just don't leave the paper sitting in front of the computer.
- krupan 9y agoAwesome. Now address the other two groups of people discussed in the article. EDIT: oh, you did mention developers by saying I shouldn't care what they do with my secrets. Um, really?