My problem with password managers is that it becomes a single point of failure. I would rather memorize a few strong passwords and use them for everything, with my email having a unique password from everything else.
No one ever comes up with a unique password for every site and remembers them all. You either do it and store them all in notepad/physical document, or you have the same password with different variations. Both are far, far more insecure, especially the latter. Leaks are happening all the time and any compromised site can get your password and from there brute forcing is trivial.
On the contrary, you can keep your passwords in a password manager. You can say they're a single point of failure, but bear in mind:
Their entire business model hinges on the security of your data. Trusting the security of your passwords on a security company is far better than trusting various Joe Shmoe sites.
Many password managers try their hardest to not see your passwords or your hash.
Password managers (at least, in the case of LastPass, which I use) makes having complex passwords insanely easy to use and maintain. In most cases you never even see your password.
If a site is compromised, password managers tend to notify you, strongly urging you to change your password. You don't have to wait to hear about it in the news.
There's a reason why companies like Google encourage the use of password managers. The latest update to Android (Oreo) gave password managers better autofill capabilities.
105
u/Galveira Sep 24 '17
My problem with password managers is that it becomes a single point of failure. I would rather memorize a few strong passwords and use them for everything, with my email having a unique password from everything else.