This is why using same password for everything is not good

[Outhue]

Now you have to pay the bills, for your younger brother's school fees, says the father of my friend who have always hide under the roof of his parent, he is old enough to be married but brotherly don't want that, he have a great plan until everything went awhol.

I can't help but keep laughing still about it, this friend of mine always cherish his Bitcoin like without it there will never be a future, and since he is still living under his parent roof he hid the secret perfectly, until on Thursday morning.

He was about to update his hardware wallet when his father asked him to go and pump water, they were already facing problem with pumping water because of epileptic greed power, so the father shouted on him, go and do it right away before they take the power again.

Bro left his hardware wallet on the table and his sibling enter his room, inserted the same password my brother used on his phone and the wallet gets unlocked, right there is a 1 BTC sitting nicely in the wallet and the boy 😱😱 screamed.

Haaaa brother Kunle is rich, all this while he is rich...

I still can't help but cracking my ribs about this.

Never ever use the same password for your phone on your crypto wallet or hardware wallet.

[bitmover]

You shouldn't use the same password for everything simple because database leaks are common.

Let's suppose you use a password for services A, B, C ,D, E, F and G.

If database of the service A leaks, you will expose the password for all other services  B, C ,D, E, F and G as well.

[Dunamisx]

We are not expected to use the same password on every portfolio we have just for security reasons, if we think we are not trying to make it possible to lose access to any of those password and decided to use the same for all, then it is more of taking risk than when we use different password and device a safety measure to save keep them, we must also understand that an online or any centralized platform is not the best ideal storage medium for keeping our password.

[Byebyebtc]

He's brother can't just be quite huu??

But him using his phone password is another level of carelessness
Apart from that, I do limit my siblings from going near my priorities, especially if I have such a secret, I will be harsh to them conserning mingling with my properties, and they will see it and avoid it

[UchihaSarada]

Never ever use the same password for your phone on your crypto wallet or hardware wallet.

Passwords must be unique and strong so using a password manager software is important for creating strong passwords as well as back them up.

[GUIDE] How to Create a Strong/Secure Password.
Are your passwords in the green?

In the last time of forum hack, theymos wrote this as another warning on risk of weak passwords.

Code:

Estimated time (conservative) for an attacker to break randomly-constructed
bitcointalk.org passwords with current technology

s=second; m=minute; h=hour; d=day; y=year; ky=1000 years; My=1 million years

Password length  a-z  a-zA-Z  a-zA-Z0-9  <all standard>
              8    0      3s        12s              2m
              9    0      2m        13m              3h
             10   8s      2h        13h             13d
             11   3m      5d        34d              1y
             12   1h    261d         3y            260y
             13   1d     37y       366y            22ky
             14  43d   1938y       22ky             1My
             15   1y   100ky        1My           160My
-------------------------------------------------------
         1 word  0
        2 words  0
        3 words  0
        4 words  3m
        5 words  19d
        6 words  405y
        7 words  3My

Each password has its own 12-byte random salt, so it isn't possible to attack more than one password with the same work. If it takes someone 5 days to recover your password, that time will all have to be spent on your password. Therefore, it's likely that only weak passwords will be recovered en masse -- more complicated passwords will be recovered only in targeted attacks against certain people.

[purple_sparkles]

He's brother can't just be quite huu??

But him using his phone password is another level of carelessness
Apart from that, I do limit my siblings from going near my priorities, especially if I have such a secret, I will be harsh to them conserning mingling with my properties, and they will see it and avoid it

Passwords for important accounts, especially those that may contain large savings, are better stored in a separate secure place. They should definitely be much more complex than a phone unlock password. It’s also not a good idea to keep saved passwords on your phone when logging into important accounts, because hackers could take advantage of this carelessness. And when it comes to close relatives who may have access to your devices, it’s important to make access to such accounts as difficult as possible, so there is less temptation to make decisions or actions that could later damage close relationships.

[Rockstarguy]

Never ever use the same password for your phone on your crypto wallet or hardware wallet.

Just because of the responsibility and discipline required for making and keeping a good password, some people prefer to use a single password for every security that requires one. What makes a password unique is how strong it is and how it is secured by the user.

When creating a password, it is important not to consider only our own convenience by thinking about how easy it is to remember, but it is also good to consider whether the password can easily be guessed by a stranger or anyone else.

[rbynxx]

I still can't help but cracking my ribs about this.

Never ever use the same password for your phone on your crypto wallet or hardware wallet.

I think it's fine that way and besides we also have some issues before that people can't crack their passwords because of complexity and they can't remember anything or he should have keep a password manager for himself, it's much better. What's not fine is you don't discipline your siblings as if you're not the eldest that stuff of others shouldn't mess with or their parents didn't teach it. I'm doing the same but what differ is that I update it regularly, more like adding characters from the last password I used, that way I can remember it.

Well, now that it is revealed I think he need to tell it plainly and calmly to his parents. It's not that bad to be responsible as long as it's fair on yourself too because after all parents should be the one responsible to pay their children's education, I hope they'll be fair too.

[monetizator4]

Bro, totally agree. I keep my passwords safe and complex. Even family should respect personal stuff. Better to be overly cautious than sorry later. Trust but verify!

[MusaPk]

You shouldn't use the same password for everything simple because database leaks are common.

Let's suppose you use a password for services A, B, C ,D, E, F and G.

If database of the service A leaks, you will expose the password for all other services  B, C ,D, E, F and G as well.

People use same password for different accounts just for there own comfort, so that they don't have to memorise different passwords for different accounts. The technique can work well for you unless something bad happens with you. It's better to accept this reality in advance that using same password for different account is a serious cyber security flaw because if somebody finds your password then he can access all your accounts. Prevention is better then cure.  

[Lucius]

~snip~
Bro left his hardware wallet on the table and his sibling enter his room, inserted the same password my brother used on his phone and the wallet gets unlocked, right there is a 1 BTC sitting nicely in the wallet and the boy 😱😱 screamed.

What is the hardware wallet in question? The devices that I have personally used have a PIN that needs to be entered to unlock the device, and even when you unlock the device, you need a UI with which to view the balance, and that same UI may also have a password.

Honestly, it seems to me that this is just one more in a series of fabricated stories that I have read hundreds of in this board, and almost all of them come from users from the same local board.

[snowpega]

You shouldn't use the same password for everything simple because database leaks are common.

Let's suppose you use a password for services A, B, C ,D, E, F and G.

If database of the service A leaks, you will expose the password for all other services  B, C ,D, E, F and G as well.

Yeah, so correct. And these days, we are more connected to Google services, meaning that Google has access to our most personal information. Yesterday, when I was using Google, I randomly placed my BTT username in the Google search engine, and it literally surprised me that even Gemine knows who is snowpega. It also tells me about my BTT activities, like I recently completed the Bitcoin node challenge.

Then I just went back and asked GemenAi about my personal information, and then it started to tell me about my doings, experience, and future plans. And that gave me another shock. It also tells me that it has access to my contacts. Then I did a little research and feel that i think i need to change the Google and its AI settings so that I won't be able to collect more information about me in the future.

I also checked your name in the Google search engine; your profile is also indexed at the top, just like mine, but AI is not giving any further information about you. Maybe you have already restricted AI and Google from collecting your personal information.

And what if Google's database gets compromise all of our information that is connected to Google will be accessed by hackers. In this case, everyone's property and assets will have a bad damage. So, I am getting more attentive in this case as well and restricting my Google settings so that it does not to collect any single piece of information about me and my actions from the next time.

[dansus021]

 using same password for everything is not good

THIS IS FOR REAL I mean in 2015-2016 is I forgot the exact year I just use the same password for everything literally everything including my bitcointalk password except my email, long story short one of website that I registered got hacked and my username and password got leaked and this account got hacked and I just recover this account on jan 2020

Now im using bitwarden and Google password (*tho I dont recommend this one ) to save my password and it turned out 245 already compromised and 505 reused password this because one single website got leaked and everything just puff gone

[goldkingcoiner]

You shouldn't use the same password for everything simple because database leaks are common.

Let's suppose you use a password for services A, B, C ,D, E, F and G.

If database of the service A leaks, you will expose the password for all other services  B, C ,D, E, F and G as well.

Well, hopefully the user is using 2FA or another method for obtaining access to those other services. Otherwise even with different passwords, the security is lacking and could eventually become compromised. Using the same password is only one way for hackers to get easier access.

And once it happens, the services are usually not held liable.

So what to do? The user has to make sure their account is secured with more than just a password. It is up to us to keep ourselves, our data, our money and etc. safe. Everything else is an illusion.

[jcojci]

He still lucky if his brother not sell the Bitcoin

I can't imagine what will happens when he come back and see his wallet then no Bitcoin there. He will stress and crazy at the time and yelling to all family.

That is your phone with the wallets inside so you must responsible and pay attention to protect it. Don't use the same password with the other devices and don't tells to others. That is your secret.

[tabas]

Aside from the password thing, why would he has kept his hardware wallet within the reach of anybody? that's also the problem that I've seen here. He should haven't put it in a place where everybody from their house knew it. That's why for all of the hardware wallet owners there, make sure that it's only you that know where you're hiding it and no one should know a thing or two about it. Because even your immediate family, you'll never know what they can do if they're desperate in need of money.

[Spaceman1000$]

Now you have to pay the bills, for your younger brother's school fees, says the father of my friend who have always hide under the roof of his parent, he is old enough to be married but brotherly don't want that, he have a great plan until everything went awhol.

I can't help but keep laughing still about it, this friend of mine always cherish his Bitcoin like without it there will never be a future, and since he is still living under his parent roof he hid the secret perfectly, until on Thursday morning.

He was about to update his hardware wallet when his father asked him to go and pump water, they were already facing problem with pumping water because of epileptic greed power, so the father shouted on him, go and do it right away before they take the power again.

Bro left his hardware wallet on the table and his sibling enter his room, inserted the same password my brother used on his phone and the wallet gets unlocked, right there is a 1 BTC sitting nicely in the wallet and the boy 😱😱 screamed.

Haaaa brother Kunle is rich, all this while he is rich...

I still can't help but cracking my ribs about this.

Never ever use the same password for your phone on your crypto wallet or hardware wallet.

There are advantage and disadvantage in having different password, what if it a an emergency situation and probably brother Kunle was incapacitated, and they needed money from his wallet for medical need as a result of an emergency, it will be easy for those of them that have the password or know his password to easily log in and make some withdrawals to help the situation.but the disadvantage part is that somebody can stumble on his wallet just the way it happened in your story, and without him knowing, they can make away with something, since they know his password. So it's a two way thing, if look at the advantage part, also have a peep on the disadvantage part.

[Darker45]

What is the hardware wallet in question? The devices that I have personally used have a PIN that needs to be entered to unlock the device, and even when you unlock the device, you need a UI with which to view the balance, and that same UI may also have a password.

Honestly, it seems to me that this is just one more in a series of fabricated stories that I have read hundreds of in this board, and almost all of them come from users from the same local board.

Let's just say OP sometimes confuses a PIN for a password. It's possible.

Be that as it may, I guess this is the same user who also shared a story in the past that seemed to be too ridiculous to be real. If he/she weren't that person, then they're not too different from each other.

OP also loves to share stories. Other than the one he/she shared today, he/she also shared he/she knew of somebody who was kidnapped and was asked to pay ransom in Bitcoin.

He/she also once shared a story that his compound was raided by the authorities and his/her trusted neighbor arrested for being a Bitcoin scammer.

He/she's got a lot of stories to tell.

[m2017]

Now you have to pay the bills, for your younger brother's school fees, says the father of my friend who have always hide under the roof of his parent, he is old enough to be married but brotherly don't want that, he have a great plan until everything went awhol.

It was just time for him to start living on his own (separate from his parents).

I can't help but keep laughing still about it, this friend of mine always cherish his Bitcoin like without it there will never be a future, and since he is still living under his parent roof he hid the secret perfectly, until on Thursday morning.

For many, bitcoin may truly be their only chance to change their future.

In what country did this story take place? How long has your friend owned this 1 bitcoin?

He was about to update his hardware wallet when his father asked him to go and pump water, they were already facing problem with pumping water because of epileptic greed power, so the father shouted on him, go and do it right away before they take the power again.

If you have to postpone interacting with hardware wallet, then put it (temporarily) somewhere away from prying eyes (why leave it on the table?), because this action will take a couple of seconds.

Because pumping water certainly takes more than 1-2 minutes.

Bro left his hardware wallet on the table and his sibling enter his room, inserted the same password my brother used on his phone and the wallet gets unlocked, right there is a 1 BTC sitting nicely in the wallet and the boy 😱😱 screamed.

Why would anyone share their phone password? Nowadays, a phone is a concentrated repository of personal information.

Why didn't your friend's family question his hardware wallet (availability)?

What hardware wallet was it?

To access the contents of a hardware wallet, it must be connected to a PC or phone.  So, your friend's brother should have known the basics of hardware wallet interaction. Did your friend leave his hardware wallet connected to other devices (which ones)?

The screaming boy should have known and understood what bitcoin is and recognized it in the hardware wallet (in the interface of an app installed on another device), which he was probably seeing for the first time (is that correct?).

Never ever use the same password for your phone on your crypto wallet or hardware wallet.

When telling stories like these, try not to gloss over the important points I asked questions about above, as this helps us understand the essence of what is happening. Otherwise it starts to look like a poorly thought out story.

[BlackBoss_]

using same password for everything is not good

THIS IS FOR REAL I mean in 2015-2016 is I forgot the exact year I just use the same password for everything literally everything including my bitcointalk password except my email, long story short one of website that I registered got hacked and my username and password got leaked and this account got hacked and I just recover this account on jan 2020

You can check your email and passwords but passwords you no longer used as it is stupid if pasting your current passwords there.
https://haveibeenpwned.com/
https://haveibeenpwned.com/Passwords

Now im using bitwarden and Google password (*tho I dont recommend this one ) to save my password and it turned out 245 already compromised and 505 reused password this because one single website got leaked and everything just puff gone

Google password is close source, it's not good, and let's choose open source password managers to use
https://keepass.info/download.html
https://proton.me/pass/download
https://pwsafe.org/