PCI only "works" because the credit card companies have the final say on who can accept payments from their cards. It's a powerful position to be in, and they u

PCI only "works" because the credit card companies have the final say on who can accept payments from their cards. It's a powerful position to be in, and they use it skillfully. We are neither in the same position nor should we try to put ourselves there: the solution to password reuse is not stronger provider security, it's stopping password reuse. We're in the future, we have password managers and the integrate with the tools we put passwords into. There is no longer any reason that a human needs to remember hundreds of unique passwords, and thus no reason for a human to reuse a password in lieu of remembering multiple.