Effective password management

on YouTube ↗18m

" summary

Billions of passwords get breached each year yet Chrome reports a 37% reduction in compromised credentials after Safety Check and around 50% of sign‑ins are now assisted by browsers while only 32% of people use a password manager. Practical steps include hosting an assetlinks.json file for cross‑platform autofill, using autocomplete="new-password" and autocomplete="current-password", allowing paste, checking passwords with Have I Been Pwned or zxcvbn, and enabling WebAuthn and multi‑factor authentication which cuts account attacks by >99.9%.

AI-written summary · about

" chapters (11)

1. 0:00Start
2. 0:33Platform features
3. 0:47Strong passwords
4. 2:02Average cost of a data breach
5. 2:14Average data breach lifecycle
6. 3:43Don't force password updates
7. 6:40Entering or resetting passwords
8. 11:42input type="password".
9. 15:13X Repeated characters
10. 16:08Keep it simple!
11. 17:2425% of people still write down passwords

" related talks

• 40mAre Password Managers Improving our Password Habits?David Ng, Stuart Schechter · RSAC 2021
• 47mThe state of passwordless auth on the webPhil Nash · NDC Porto 2023
• 32mPasswords are so 1990Sam Bellen · Best of Web 2019
• 26mStudying the Impact of Managers on Password Strength and ReuseMichael Backes, Sascha Fahl, Michael Schilling, Sanam Ghorbani Lyastani, Sven Bugiel · USENIX Security '18
• 36mProtecting Users from DeceptionChristiaan Brand, Emily Schechter · Google I/O 2019
• 30mThe State of Passwordless Auth on the WebPhil Nash · JSNation 2023
• 51mThe state of passwordless auth on the webPhil Nash · NDC Oslo 2023
• 10mUsers' Perceptions of Chrome Compromised Credential NotificationYue Huang, Borke Obada-Obieh, Konstantin Beznosov · SOUPS 2022