Maybe You Don’t Have to Use Strong Passwords for Every Account After All

The Citizen's Guide to the Future
July 16 2014 3:17 PM

Maybe You Don’t Have to Use Strong Passwords for Every Account After All

password
Maybe it’s not so bad that your password is 12345678.

Photo from Shutterstock/Cefo Design.

If you need strong passwords for every one of your accounts, from your local public library to your grocery store rewards card, then you just have to use a password manager. There's no other way to keep your letters, numbers, and symbols straight. But maybe the premise that you need strong passwords for everything is wrong. A new Microsoft study wants to give everyone a break.

Microsoft researchers Dinei Florêncio and Cormac Herley, along with Paul C van Oorschot from Carleton University in Canada, note that password managers generate great random login information, but can cause problems if users forget their master password.* As the Guardian reports, password managers also store passwords locally or in the cloud, and both approaches can be susceptible to hacks. The researchers wrote, “It introduces severe new risks: if the master password is guessed or used on any malware-infected client, or the cloud store is compromised, then all credentials are lost.”

Advertisement

Instead, the group argues that people should use weak, memorable passwords or the same password for low-importance accounts. That way they can focus on memorizing a few strong, diverse passwords for their most sensitive accounts, like email and banking. This seems especially appealing since password managers are difficult to use properly in the first place. (For instance, they make it harder to use a friend’s computer to log into your Gmail account.)

If you're currently using a password manager successfully this study might not be grounds to give it up, but if you've done absolutely nothing about password security when you know you should, this might be a good strategy to start with. Just make sure those important passwords really are super secure.

Correction, July 16, 2014: This post originally misspelled Carleton University.

Future Tense is a partnership of SlateNew America, and Arizona State University.

Lily Hay Newman is lead blogger for Future Tense.

TODAY IN SLATE

Sports Nut

Grandmaster Clash

One of the most amazing feats in chess history just happened, and no one noticed.

The Extraordinary Amicus Brief That Attempts to Explain the Wu-Tang Clan to the Supreme Court Justices

Amazon Is Officially a Gadget Company. Here Are Its Six New Devices.

Do the Celebrities Whose Nude Photos Were Stolen Have a Case Against Apple?

The NFL Explains How It Sees “the Role of the Female”

Future Tense

Amazon Is Now a Gadget Company

Food

How to Order Chinese Food

First, stop thinking of it as “Chinese food.”

Scotland Is Inspiring Secessionists Across America

The Country Where Women Aren’t Allowed to Work Once They’re 36 Weeks’ Pregnant

The XX Factor
Sept. 18 2014 11:40 AM The Country Where Women Aren’t Allowed to Work Once They’re 36 Weeks’ Pregnant
Moneybox
Sept. 17 2014 5:10 PM The Most Awkward Scenario in Which a Man Can Hold a Door for a Woman
  News & Politics
Weigel
Sept. 18 2014 3:19 PM In Defense of Congress Leaving Town Without a New War Vote
  Business
Business Insider
Sept. 18 2014 3:31 PM What Europe Would Look Like If All the Separatist Movements Got Their Way
  Life
Outward
Sept. 18 2014 4:15 PM Reactions to a Sketch of Chelsea Manning Reveal Transmisogyny
  Double X
The XX Factor
Sept. 18 2014 3:30 PM How Crisis Pregnancy Centers Trick Women
  Slate Plus
Behind the Scenes
Sept. 18 2014 1:23 PM “It’s Not Every Day That You Can Beat the World Champion” An exclusive interview with chess grandmaster Fabiano Caruana.
  Arts
Culturebox
Sept. 18 2014 4:00 PM When The Cosby Show Got “Very Special” Why were The Cosby Show’s Very Special Episodes so much better than every other ’80s sitcom’s?
  Technology
Future Tense
Sept. 18 2014 2:39 PM Here's How to Keep Apple From Sharing Your iPhone Data With the Police
  Health & Science
Science
Sept. 18 2014 3:35 PM Do People Still Die of Rabies? And how do you know if an animal is rabid?
  Sports
Sports Nut
Sept. 18 2014 11:42 AM Grandmaster Clash One of the most amazing feats in chess history just happened, and no one noticed.