Stop reusing passwords for your email, seriously

I watched a buddy lose his Steam account last month because he used the same password for his email and a sketchy forum. Once they got the email, they reset everything, bank alerts included. It took him 3 days and a call to his credit union in Austin to sort it out. Have you checked how many of your logins share the same password?

2 comments

2 Comments

joseph5291mo ago

Different folks different strokes I guess. I run maybe 3 passwords across everything and honestly the convenience beats the paranoia for me. The real issue is people clicking on phishing links in the first place, not that they reused a password. Plus most places have 2FA now or at least text alerts, so one reset usually sends a warning before anything gets wiped. Also if you use a password manager you're just one master password away from the same problem, someone gets that and they own every account anyway. Maybe it's just me but I'll take the tiny risk over making my life a chore every time I log into something.

the_susan1mo ago

And honestly the "master password" thing you mentioned is exactly why I keep hearing people defend reusing passwords, but the difference is a password manager gives you ONE thing to protect instead of leaving your entire digital life scattered across a hundred sites, each with its own weak link. @joseph529 says text alerts usually save him, but that only works if the attacker doesn't quietly change the recovery email or phone number first, which is EXACTLY what happened to my buddy, he got one text that looked like spam and ignored it. You are basically betting your bank account on the assumption that no one will ever guess or leak that one password you use everywhere, and after seeing how fast things can spiral I will take the 5 extra seconds to type in a unique one every time.