| ▲ | tananaev 2 hours ago | |
You're arguing theory and not practice. In theory they're better of course. The problem is the implementation. And implementation is a mess because everyone is trying to lock you into their own little ecosystem. | ||
| ▲ | MBCook an hour ago | parent | next [-] | |
In implementation, passwords are a complete disaster. We’ve been dealing with the fallout of it for decades. In theory, if everyone did everything correctly and followed best practices, passwords would work quite well. Reality shows we are not anywhere near there. | ||
| ▲ | nathanaldensr 2 hours ago | parent | prev [-] | |
Exactly! Whereas passwords are extremely flexible and can be stored, managed, and written down in numerous ways that are vendor-independent. Want to store your passwords on sticky notes in a safe? Go ahead! Want to use Bitwarden? Yep, you can. KeePass for offline storage? Yes! With good password hygiene (128-bit entropy, never reusing passwords) there is virtually no risk, especially with 2FA added. | ||