A random tweet about password managers got me to finally audit my old accounts
Saw someone in a reply thread mention that they found a 2014 login from a hacked forum still saved in their browser, and it hit me that I've been carrying around 15+ old passwords from sites I forgot even existed. Took a Saturday morning in Austin to run my email through haveibeenpwned and clean out every unused account from my password vault. The breach list was longer than I expected, 9 entries total. Has anyone else done a purge like this and been surprised by what was still floating around?
Wow, nine breaches though? I gotta ask, is it really that bad if some old forum from 2014 has your email and a password you stopped using years ago? Unless you were reusing that same password on your bank or email, a leak on some dead site does basically nothing. People act like every breach is life or death but most of those lists are just spammer fodder. I got hit in like 5 breaches myself and nothing happened, no weird charges, no hacked accounts. The panic seems way bigger than the actual risk.