A Sophos survey found that 48% of users use "a few different passwords." http://www.thetechherald.com/article.php/200911/3184/Internet-users-still-using-same-p

A Sophos survey found that 48% of users use "a few different passwords." http://www.thetechherald.com/article.php/200911/3184/Internet-users-still-using-same-password-for-all-Web-sites http://www.thetechherald.com/article.php/200911/3184/Interne... I have interviewed a few people about their password strategies and quite a few seem to have a tiered password approach. But that is still an easy setup to exploit, as I explain here: http://www.filterjoe.com/2010/05/14/the-usual-way-to-manage-passwords/ http://www.filterjoe.com/2010/05/14/the-usual-way-to-manage-... Furthermore, I've noticed in my interviews that few people realize that the account they need to guard most is their e-mail account. They may have a 3 password strategy but, it goes something like: worst password: forums, news sites, Sony, etc. better password: email, social best password: banks, brokerage, commerce Once someone gets into your main email account, it's usually pretty easy to break into all the other accounts unless you have a unique password for every account.