Troy Hunt:
The penny first dropped for me just over 7 years ago to the day: The only secure password is the one you can’t remember. In an era well before the birth of Have I Been Pwned (HIBP), I was doing a bunch of password analysis on data breaches and wouldn’t you know it – people are terrible at creating passwords! Of course, we all know that but it’s interesting to look back on that post all these years later and realise that unfortunately, nothing has really changed.
Today, I’m announcing a partnership between HIBP and 1Password. This is the first of its kind for me and I’ve actively avoided anything of this nature until now. I want to talk about why that is, what’s changed and what the new partnership looks like.
What a great idea.
1. 1Password is great. I have 577 logins, 8 credit cards. 20 secure notes, 36 software licenses in my bucket.
2. Not all passwords need to be strong. For example, fora. Do I really care if someone pretends to be me at Bogleheads? I think not.
Makes sense. Hunt’s post is a model of transparency and disclosure. And his linked infosec lecture ain’t bad, either.
1Password is just the best. Things that have been added over the last couple of years which I love:
Thanks for the pointer. Signed up for HIBP.