Magic/tragic email links: don't make them the only option

Re:Magic/tragic email links: don't make them the only option by sebastiennight on Wednesday January 08, 2025 @09:45AM (#42634766)

This is an extraordinary claim on two counts:

1. Sixty percent seems astronomically high, do you have a source?

and

2. Most "normal" non-tech-savvy people I know who do use a password manager (which I've typically installed for them), are revealed a while later to still use a variation of password reuse : either storing the same password per category of websites, or having a password template they use on all sites, e.g. "IdenticalSecretWord_SiteName"

[ Parent | on HN ]

Re:Magic/tragic email links: don't make them the only option by lkbm on Wednesday January 08, 2025 @11:03AM (#42635564)

I don't have the source, but don't think 1Password/LastPass/KeePass. Think the "would you like to save this login" built in to Chrome, Firefox, Edge, Windows, and iOS. These days, you have to opt-out of password management.

[ Parent | on HN ]

Re:Magic/tragic email links: don't make them the only option by schnable on Wednesday January 08, 2025 @01:23PM (#42636951)

Right, use of a Password Manager does not imply they are using Password generation - it may just mean they click "Save this password" after logging in using a re-used password.

[ Parent | on HN ]