True, there have been occasions where users have reused passwords in too many applications and it has caused problems. This has led to the perhaps understandable reaction of a strict ban on password reuse. However, this is an extreme reaction, similar to throwing the baby out with the bathwater. The current state of computing simply demands too much of users if they are not allowed password reuse. Trying to keep dozens of passwords in memory isn't feasible and means users simply can't follow the rules. Giving users a set of standards they can't hope to meet undermines the seriousness of cybersecurity and quickly relegates cybersecurity experts to the role of Chicken Little in the minds of users. A proper password reuse scheme, however, could change that. Not only would it reach users wherever they are, but it would also give them confidence that security experts understand their limitations and want to create a solution that works for everyone. Instead of having an adversarial atmosphere, one could foster an atmosphere of cooperation that would benefit
tags