3 ms·
> If the site you use the password on gets their database hacked, someone can easily start to brute force passwords. Also, sites getting their databases hacked
by citricsquid 14y ago
> If the site you use the password on gets their database hacked, someone can easily start to brute force passwords. Also, sites getting their databases hacked is not uncommon.
If a sites database is hacked then you can assume their entire site is compromised, in which case whether or not they find out your password is moot because if you use real security and every site has a unique password you risk nothing if they do crack it. If you use the same password for every site cracking is the least of your worries, what if a website is breached and the login system is replaced with a system that stores your password? What if you're phished? What if your computer is stolen and someone just checks your saved passwords? No matter how complex a password is if it's used on multiple websites it's insecure.
- danpalmer 14y agoI would totally agree, and this is why I use a different password for every site. However, I am in the small minority and we have to face the fact that most people use one or only a handful of passwords, and these people have a very poor idea of the criteria for a good password, mainly because so many sites have poor guidelines, and poor policies (like max 16 chars, no punctuation, etc).
- citricsquid 14y agoLet's hope Windows 8 has a built in password manager :)