3 ms·
> In my opinion, the only route to actually make this work and still be good against breaches is to memorize a function that generates a unique password given t
by searchableguy 6y ago
> In my opinion, the only route to actually make this work and still be good against breaches is to memorize a function that generates a unique password given the website name
That's a bad idea. If one guesses your function, all your passwords are gone and it's not very hard.
- knodi123 6y ago> That's a bad idea That's a compromise. The best idea is to memorize a totally unique machine-generated password for each separate site and service. But there can't be more than a handful of people in the world with the skill and drive to do that correctly. There needs to be some degree of tradeoff with accessibility, or you're just designing security for spherical cows in a vacuum. I think a security savvy person using the function approach correctly is in much better shape than most people, and indeed most security professionals.