One comment about my password manager made me rethink everything

I've been using the same password manager for like 4 years, just storing everything with no real method. Last month a guy in a security meetup in Austin told me I was doing it wrong because I reused bank PINs and let the manager generate short 10 character passwords. He said length beats complexity for cracking, so I switched everything to 16 character passphrases and turned on 2FA for the vault itself. It took me a whole weekend to rotate 60 accounts, and I found three old logins that had my old email on them. Now I'm wondering if passphrases are actually that much better or if I just got talked into extra work. Has anyone else gone through a full password rotation like this and felt it was worth it?

1 comments

1 Comment

the_paul11d ago

Yeah, that Austin guy gave you solid advice!