this post was submitted on 27 Nov 2023
262 points (97.8% liked)

Technology

61041 readers
3592 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago
MODERATORS
L3s
enu
technopagan
L4s
262
Largest Study of its Kind Shows Outdated Password Practices are Widespread (www.cc.gatech.edu)
submitted 1 year ago by L4s to c/technology
47 comments fedilink hide all child comments
 

Largest Study of its Kind Shows Outdated Password Practices are Widespread::undefined

you are viewing a single comment's thread
view the rest of the comments
[–] 9point6 56 points 1 year ago (2 children)

Length is the most important thing, everything else is somewhat secondary. We should be shifting thinking of this to passphrases rather than passwords.

I'm sure most of us have seen the "correct horse battery staple" XKCD, but that's what people really need to think of as passwords now, not my-favourite-celebrity-but-with-the-"e"-changed-to-"3"-and-an-exclamation-mark-at-the-end.

[–] wavebeam 14 points 1 year ago (2 children)

Nah fuck that. Sites need to adopt this passkeys instead. It’s an impossible task for people to have unique credentials for every site, even if they are “memorable”. This is a design issue not a personal responsibility one. When designing for large volumes of people, you have to assume that the majority will do something easy and stupid over difficult and smart.

[–] [email protected] 15 points 1 year ago (1 children)

Until they do, password managers get you most of the way there, by letting you have a single password on your side, mapping to one password for each login. Bitwarden is great, and free.

[–] [email protected] 11 points 1 year ago

Bitwarden is the way

[–] [email protected] 10 points 1 year ago

Sites need to stop needing an account for everything. My haveibeenpwnd is full of sites that I can't believe had my email in the first place. Obviously I gave it to them but like cmon

[–] [email protected] 2 points 1 year ago

Damn you my go-to password in the 2010's was "P4nc4kes!".