Database leak reveals 10 terrible passwords you should avoid

If a site is hacked then any password is vulnerable.

Key word there is SITE, password managers are "off" the grid technically they are on a phone or computer which is why encryption is important. Also sites get hacked.. doesn't matter if they HAVE your password or not, they have your info, so a password is worthless to them anyway, a password manager is NOT the problem.
 
No, that will never happen. If you consider that an account has a username and a password, biometrics data like your fingerprint can replace your username, not your password. There are many reasons, one being that if the site where you login is compromised and somebody gets hold of your account... You can always change your password, but you can't change your fingerprint. It would be too easy to create a fake fingerprint scanner that, instead of working as a normal one, supplies to the PC the fingerprint of another user (yours, for example), stolen from some server on the web. From that moment on, everybody would have permanent access to your accounts.

You can find much more here: http://security.stackexchange.com/q...-use-passwords-passphrases-next-to-biometrics

Well that's not true I have a couple of credit card apps that use my fingerprint ONLY to login, no password.. it's tied to my phone, I give it some random swipes and touch my fingerprint like 10 times, but access to my account is via biometrics.. if I need to access like online if my app is not with me for whatever reason I can always call them or initiate a "reset", then I would need to answer questions and send text messages and do a bunch of things to get back in.. which would guarantee I would NEVER make that mistake again.

Think of it another way if its hard to get in to an account you OWN its going to be that much harder for others to get access as well.. convenience and security NEVER cooperate, they are mutually exclusive.

Again password managers are great for this for sites that still use passwords, but those days are numbered...
 
I let LastPass generate 12 character alpha-numeric passwords for websites that have my personal information like card numbers, name and address, and I reuse the same two passwords with two to three slight variations of those two passwords for everything else.

I think you are not getting the point here... you should NOT reuse passwords if you can slightly vary the code so can hackers..

HELLO?!?!?
 
I think you are not getting the point here... you should NOT reuse passwords if you can slightly vary the code so can hackers..

HELLO?!?!?
If I actually had something that needed protection, I might. I truly would get over it if every single account I had was breached and stolen from me. Not everyone has a need in having multiple passwords or a password manager. And not everyone cares what you think of them for not using a password manager either. I know I don't care what you think.

Now if I was managing online banking, I would consider better security for that alone. These forums don't mean anything, I can always start a new username. And then let everyone know who I am, and possibly get my old account back through talking with admin.

You never know where lightning is going to strike. I feel sorry for those walking around as if it is going to strike at any moment. If you are targeted by a hacker, there is nothing you can do about it. You are going to be hacked, deal with it then!
 
Back