3 ms·
This happened to me: I forgot a password (site was ThompsonReuters, so not a tiny company we-dont-know-better), and requested a restore via email. The mailed me
by otherme123 5y ago
This happened to me: I forgot a password (site was ThompsonReuters, so not a tiny company we-dont-know-better), and requested a restore via email. The mailed me the password in plain text: "Your password is CorrectHorseBatteryStaple, you can change it at url.com/change".
So imagine you use CorrectHorse, and some site stores passwords in plain text or weakly hashed, and then the DB is compromised (if they do badly the storage, chances are the DB is also weak), and boom, a cracker has your email, password, and the name of your first pet.
But if I use KeepPass, I don't care if my password leaks from that site or the other, or if they store in plain text. That password is only used in one site.