While I like to write about a variety of security-related topics, it seems that issues with passwords keep coming up again and again.
Passwords, and in particular their use for online authentication, is a mess. I've written about this a number of times including here, here and here. My advice for online use of passwords has been the same all along. I've always said:
- choose good long passwords (long sentences are just fine)
- use a password vault, and
- use a unique password at each online site.
- (bonus) use 2-factor authentication for online sites when available (and complain if it isn't available yet!)