> Passwords alone are not good enough security. This made me think for a moment. Why not, though? My password manager generates random passwords with numbers,

> Passwords alone are not good enough security. This made me think for a moment. Why not, though? My password manager generates random passwords with numbers, special characters and whatnot with a length of 24 characters. Even I don't know most of my passwords at this point, so what's the problem with (secure) passwords? Poor application security? That's not really my problem, is it? edit: to add this. I know that "test123" would be a problem, but my secure passwords can not be guessed by anybody or really be bruteforced. so, what does 2FA really protect me from in those cases?