What a shitshow
post
Usekeys are a pass. Trap them!
Meanwhile, half of the people at every company I've ever worked at:

So at a customer I found the following note. At the desk of an employee with the last name "Sun":
"'Sun' is user name and password!"
I wonder why we use passwords at all.
Oct0ber2026!
If the computer is in even a marginally secure place, storing passwords on physical paper is better than what a lot of people do.
Of all the proverbial bullets I've been hit with, none had my name on them; they were all addressed "To whom it may concern". The times my identity has been stolen or my accounts compromised it was because somebody attacked some fairly large entity, like Alphabet or Equifax or Microsoft or Visa. Nobody's going to walk into my house looking for my passwords. They might walk into my house looking for my television, but that hasn't happened to this house longer than I've been alive.
Yep, there's a reason 2FA recovery keys are usually printed and stored safely.
With that said, one way to avoid someone compromising service A due to somebody breaking into service B is to have different passwords everywhere, so a Password Manager is more convenient anyway.
The biggest problem I see is that it requires OS or browser integration. While possibly a better solution than simple passwords this feels like a vendor lock-in scheme.
You don't remember them you are not expected to moving from iOS to Android lets say generate new ones for your new device.

top 50 comments