> Weak passwords are not ok even on throw-away accounts. They can be okay for throw-away accounts, it just depends on the circumstance. > Nobody is going to

> Weak passwords are not ok even on throw-away accounts. They can be okay for throw-away accounts, it just depends on the circumstance. > Nobody is going to bruteforce your password. I can assure that there are still people brute forcing passwords. I see it happening all the time, especially for SSH accounts. While you are correct that phishing and password reuse are problems, they are also not totally solved by using 2FA.