Dashlane Blog

Using the classical desktop version? > Microsoft Skype is one of the largest React Native applications in the world. https://blog.dashlane.com/exploring-react-native-on-windows/

sorry, quick correction. It was dashlane. https://blog.dashlane.com/virginia-tech-passwords-study/

This gets at a few issues: - Account-based authentication for numerous systems has reached a point of increasingly negative user returns. Experian (citing unspecified research, probably a 2015 Dashlane study) notes that the typical user had about 100 accounts -- 130 for the US, growing at 15% per year, or alternatively, doubling every 5 years. https://blog.dashlane.com/infographic-online-overload-its-worse-than-y… - Crud reports are crud. I've got an issue with an Android app I use heavily (Pocket), which has been crashing with exceptionally annoying frequency (30x/week by one Android report, which suggested uninstalling the app). I've taken to simply reporting those, for various reasons without the ability to report this as the Pocket user, simply noting "app has crashed again". Pocket have finally responded (after weeks). The problem itself has been ongoing for years. - There should be an analogue to James C. Scott's Seeing Like a State for software / SaaS vendors. Call it "seeing like a software developer". The power of software is that a small group (and frequently a single individual) can create a tool that is useful for and used by many -- hundreds, thousands, millions, billions. The weakness is that gathering and assimilating useful feedback is extraordinarily difficult. Most feedback channels can be overwhelmed by a few high-volume (and often not-particularly-useful) actors. Quality information is difficult to acquire. Sorting useful from…

That's dangerous advice. Having access to some (or a combination of) "less-secure" accounts could allow an attacker to get enough personal information to escalate privileges through reset fields, social engineering in customer support, or just plain weird interactions between accounts. Besides, most people have enough "important" logins (social media, email, amazon, bank(s), computer, cloud accounts) and some have lots that there's no good reason not to use a password manager. Even with 6 passwords to remember (plus a 7th for all the non-sensitive accounts), it's hard to make them unique enough, and if you end up with a system it's pretty easy to infer the rest of the passwords. Imagine this scenario: you are an average person. You have 90 accounts each requiring a password [1]. 5 of them you deem sensitive enough to have their own password and 85 of them share a password. One of those 85 is compromised. Now you'll spend all day stressing out whether one of those 85 accounts, in hindsight, is actually something you care about at least to some extent. Desperately trying to remember whether there were any other accounts that you should've secured better. (Anecdotally, this has happened to me before a password manager: I had different logins for important stuff and the same for non-important stuff; it's also happened to most of my friends at some point.) Or you can use a password manager. Once you do have a password manager, you can go ahead and have unique random logins for…