4 ms·
You missed a few glaring failure modes in the mental model one - one of the most extreme is if someone pops your password on two sites, they can likely derive a
by hobs 3y ago
You missed a few glaring failure modes in the mental model one - one of the most extreme is if someone pops your password on two sites, they can likely derive all your other passwords.
- throw310822 3y agoSure, although I wonder how often anyone is actually looking at single passwords, rather than just pushing tons of them through automated systems.
- evilduck 3y agoDepends on your threat model. Public figures likely have their passwords individually scrutinized when their accounts are found out.
- paulryanrogers 3y agoI'd go further and point out that derived secret systems put all your future passwords at risk. Whereas a password manager is only your current and past passwords.