Rant: My old boss at a shop in Boise called me out for reusing the same password on 12 accounts, and he was right
Back when I worked retail in Boise, my manager watched me log into our shift swap site and then our email with the exact same password. He just said "that's how one breach turns into three" and walked off. I shrugged it off for about a year until a gaming forum I used got hit and suddenly my email and bank login were both exposed. I spent a whole Saturday changing 12 passwords and I was sweating by number 4. Now I use a password manager and let it make 16 character random ones I could never remember. Two factor is on everything that offers it, even my pizza app. Does anyone here bother with the longer passphrases instead, or is random junk still the safer bet?
Did you ever think reusing passwords was fine because who would bother with little old you? I used to think the same way and then my Netflix and my credit card got hit in the same week from some leak I never even heard of. I was so sure my accounts were too boring to steal and that was just plain dumb of me. Now I let a password manager make the long random ones and I don't even know most of them, which felt weird at first but now I like it. The passphrase thing sounds nice in your head but people pick stuff they can remember and that is the whole problem right there. Random junk wins for me, and two factor on top means even if one site gets hit I am not losing my bank over it.