Security, passwords, and the messiness of everyday experiences
Passwords ensure that unauthorized people don’t get access to a system. But the mere fact that tools like 1Password exist to remove the need to remember passwords should tell us that we’re doing it wrong. Current password systems solve the problem from the wrong perspective: the system, not the user.
The problem runs even deeper. We’re not only solving the problem from the wrong perspective, we’re also introducing unnecessary complexity because of the way these systems are implemented.
I've often remarked on the failure of passwords but didn't really understand why. Passwords are from the system's point of view, not the user. That is, no one wants a password (except maybe security wonks) but they want their information kept private.
Are passwords the wrong answer? Or are passwords buying criteria? Or both?
Thoughts?
