Why does nobody admit that reusing passwords is the real problem, not weak ones
I used to think a strong password was enough, so I had one long random string with symbols and numbers that I used on 14 different sites. Then my Spotify got hacked in March and someone tried to buy gift cards with my card on file, and I couldn't figure out how since the password was tough. A friend who does IT showed me that a breach at some old forum from 2017 had dumped my email and that same password, and that's all anyone needed. I was doing the one thing every tip list warns about while patting myself on the back for having 16 characters. The fix wasn't a better password, it was a manager and a different one for each site, plus two factor on the email that resets everything. So which one bit you first, a reused password or a weak one? Curious what actually woke people up.