How passwords and logins work: why a website should not know your password
Credential stuffing: why a leak at one website is a danger for your other accounts
You joined a small website once and forgot it. Now that website leaks its passwords. You used the same password on other websites. So those accounts are in danger too, and the thief does not even have to guess.
-
1
You use your new gym passphrase on a small recipe website too. That website was not as careful as the gym: it kept passwords in plain text. This week, its list leaks.
-
2
Rono reads your email and your passphrase, with no guessing at all. The recipe website itself holds nothing he wants.
The rest of this episode is for subscribers
Subscribe to read every premium episode. You can cancel when you want.
Paid yearly: $99 instead of $119.88