>Password management has gotten completely out of hand. Sure, the industry is basically recreating public key crypto very, very badly. All the tech has been th

>Password management has gotten completely out of hand. Sure, the industry is basically recreating public key crypto very, very badly. All the tech has been there to do away with passwords for ages but path dependency can be a very scary and depressing thing sometimes. Probably doesn't help that for a long time only users paid any of the cost. Granted there is also this weird mindset even amongst lots of tech workers that authentication is some scary thing and should be manual too, as in this idiotic article. Perhaps that has also inhibited progress. >And all for what? My passwords have been leaked dozens of times over in various security breaches anyway. Well, that's the major reason behind password managers isn't it? It's precisely because we're not using real crypto for authentication that what 3rd parties do and whether they get breached actually matters, and in turn creates the necessity to use a different good password for every single service and have the ability to change them to a new good one at will. For most humans at any significant scale that rapidly becomes impossible to manager so naturally the right thing to do at an individual level is turn to a computer to handle it.