Re:"Pwned Passwords" V2 With Half a Billion Passwords
by pbhjpbhj on Thursday February 22, 2018 @11:56AM
(#16439010)
Other methods being poorer doesn't make your method objectively better. You're probably right on low-hanging fruit, all depends on your threat model I suppose.
Don't password managers have 2FA, and alternate phone numbers?
Compare to PW managers: "If your password db and master password get leaked, attached to the same email, then you lost all your accounts." Also with PW manager, losing your phone can mean Denial-of-Service to all of your accounts if you are i.e. travelling.