35% of Gen Z said they never or rarely update passwords after a data breach affecting one of their accounts, according to Bitwarden. Only 10% reported always updating compromised passwords. 38% of Gen Z and 31% of Millennials only change a single character or simply recycle an existing password. 79% of Gen Z admit password reuse is risky, yet 59% recycle an existing password when updating accounts with companies that disclose data breaches. 55% of … More → The post People know password reuse is risky but keep doing it anyway appeared first on Help Net Security.

  • AbsolutelyNotAVelociraptor
    link
    fedilink
    English
    arrow-up
    11
    ·
    1 day ago

    Sometimes there are policies that made this almost forced. Case in point: the company I work for forces you to change password every 60 days max. They don’t allow the use of passwords managers and you can’t use the last 5 passwords. So what do people do? Just go with a simple word and change one number each time. Like “velociraptor1” then “velociraptor2” and so on.

    I use passphrases which let me remember them easily while offering protection but it’s so stupid that they do it this way.

      • AbsolutelyNotAVelociraptor
        link
        fedilink
        English
        arrow-up
        6
        ·
        1 day ago

        I have continuous fights with my IT dept. I work for OT, so my day is behind a computer doing technical stuff with machines and other computers, so although I’m no expert in cybersecurity, I know the basics about it and about privacy.

        It’s an everyday war with them for every single thing I try to do. The best one I remember was when I tried to install firefox because I didn’t want to use chrome or edge. Tey blocked traffic from firefox through the company’s firewall. I called the IT to explain that I wanted to use firefox because I want to use ublock and other privacy related extensions to block tracking, redirect, phishing and other harmful things and I think their response caused me to facepalm in a way I never thought it was possible: they told me that if I wanted privacy, I should use chrome’s incognito mode.