A buddy told me I was using my password manager wrong for years

I used to just save every login without ever updating the master password. A friend at work saw me do it and said "you're basically leaving the front door unlocked with a safe inside." He showed me how to set up two-factor and rotate my master password every 3 months. It took about 20 minutes to fix but now I feel way less paranoid about getting hacked. Has anyone else ignored basic security advice until someone called them out on it?

3 comments

3 Comments

patricia26223d ago

Wait, you never changed your master password for years?

annajenkins23d ago

Kept mine for 8 years, never had a breach.

elliotm5722d ago

Oh, "never had a breach" - but that's not how it works. If someone got your password from a data breach on a different site and you reused it, you wouldn't even know. The password manager itself might not have been hacked, but that's totally different from your password staying safe out in the wild.