Magic/tragic email links: don't make them the only option

Re:Magic/tragic email links: don't make them the only option by adastra22 on Wednesday January 08, 2025 @05:37AM (#42632838)

A majority of internet users (>60% in 2024 and growing) use password managers and don’t reuse passwords.

[ Parent | on HN ]

Re:Magic/tragic email links: don't make them the only option by JW_00000 on Wednesday January 08, 2025 @07:44AM (#42633585)

Do you have a source for that number? 60% seems extremely high based on non-technies I know.

[ Parent | on HN ]

Re:Magic/tragic email links: don't make them the only option by mooreds on Wednesday January 08, 2025 @08:22AM (#42633918)

Agreed. I'd be thrilled if it were true, though! Because password reuse (esp without MFA) is a big problem.

[ Parent | on HN ]

Re:Magic/tragic email links: don't make them the only option by wccrawford on Wednesday January 08, 2025 @06:57AM (#42633280)

https://www.security.org/digital-safety/password-manager-ann...

36%.

[ Parent | on HN ]

Re:Magic/tragic email links: don't make them the only option by ctxc on Wednesday January 08, 2025 @08:52AM (#42634194)

I'm surprised. >60% seems high even for tech literate software engineers!

[ Parent | on HN ]

Re:Magic/tragic email links: don't make them the only option by sebastiennight on Wednesday January 08, 2025 @09:45AM (#42634766)

This is an extraordinary claim on two counts:

1. Sixty percent seems astronomically high, do you have a source?

and

2. Most "normal" non-tech-savvy people I know who do use a password manager (which I've typically installed for them), are revealed a while later to still use a variation of password reuse : either storing the same password per category of websites, or having a password template they use on all sites, e.g. "IdenticalSecretWord_SiteName"

[ Parent | on HN ]

Re:Magic/tragic email links: don't make them the only option by lkbm on Wednesday January 08, 2025 @11:03AM (#42635564)

I don't have the source, but don't think 1Password/LastPass/KeePass. Think the "would you like to save this login" built in to Chrome, Firefox, Edge, Windows, and iOS. These days, you have to opt-out of password management.

[ Parent | on HN ]

Re:Magic/tragic email links: don't make them the only option by schnable on Wednesday January 08, 2025 @01:23PM (#42636951)

Right, use of a Password Manager does not imply they are using Password generation - it may just mean they click "Save this password" after logging in using a re-used password.

[ Parent | on HN ]

Re:Magic/tragic email links: don't make them the only option by dspillett on Wednesday January 08, 2025 @10:03AM (#42634956)

In my experience 60% seems too high even for supposedly technical users (ref: I work in a dev firm), at least away from their jobs.

I definitely don't believe it for the wiser population (my gut, again based on people I know, says the number is more like 10%, maybe 15). Even the 36% figure on the report on security.org posted above seems dubious, I suspect they have some bias in their survey. Unless that is some people who use the iCloud password manager for some things and no password manager for everything else, so it isn't claiming 36% routinely use a password manager away from a few key accounts.

[ Parent | on HN ]