Got roasted by a pen tester for recycling passwords at work

Last month a security consultant found that 3 of my coworkers and I were using the same password for our email and a random forum site. He told me it only takes one data breach to compromise the whole network. I felt like an idiot but he was right. Now I use a password manager and set unique passwords for every account. Has anyone else had a security pro call them out on something embarrassing?

1 comments

1 Comment

wren_jackson14h ago

Got called out by our IT guy for having "Password123" as my admin login. Felt like a complete dumbass when he showed me how long it'd take to crack it. Switched to a password manager that same week and started using random 20 character strings. Been smooth sailing since, no more embarrassing security moments.