The article explains the weaknesses of the password-centric approach: > whether by phishing or exploiting the fact the passwords are weak or have been reused

The article explains the weaknesses of the password-centric approach: > whether by phishing or exploiting the fact the passwords are weak or have been reused 1. Phishing is harder when you only ever enter your password into 1 place, and that one place is designed to be secure and consistent. 2. Much easier to have exactly 1 strong password than unique strong passwords for every website. Is it better than a vault full of random passwords? Probably not, beyond pressuring the user into using the more secure method