In our current security paradigm the most common form of device and data protection remains the password. Although not the most ideal or convenient way to do things, we rely on password for most of our access verification. These passwords remain our first line of individual defense.

In a recent blog post https://farischebib.is/hacking/your-password-sucks Chebib (2017) (not me), gives some excellent advice and warnings about password security. It's a short read.

1. What practices will you change after reading this?

2. Did you try the https://haveibeenpwned.com/ site?