Given that OpenAI is probably more poplar with people interested in technology I suspect most users would use a password manager and generate unique passwords.

Given that OpenAI is probably more poplar with people interested in technology I suspect most users would use a password manager and generate unique passwords. I work in security though so maybe I’m just surrounded by people that do. I’ve combed through thousands of credential dumps to perform password stuffing attacks and the success rate is always very low. I would be shocked if the sellers hadn’t already taken any credentials that work against the associated email account out before they listed the dumps for sale, given that email account access is way more valuable than access to someone’s OpenAI account.