Poll of the Day > Go change your Twitch passwords right now

(+) Yeah! (+)

https://www.theverge.com/2021/10/6/22712250/twitch-hack-leak-data-streamer-revenue-steam-competitor

And any account that shares the same password

---

papercup posted...

And any account that shares the same password

and while you're at it STOP REUSING PASSWORDS AT ALL

---

Thanks for the heads up.

Changing the pw is so annoying though because I'm not going to remember this ****ing thing. lol

---

Ill have to when I get home

Clench281 posted...

and while you're at it STOP REUSING PASSWORDS AT ALL

If I did that, I wouldnt be able to log on to anything at all Or Id have to write them all down somewhere

GRTooCool posted...

Changing the pw is so annoying though because I'm not going to remember this ****ing thing. lol

Same. Ill probably have to end up changing it constantly just from forgetting
---

I'm way overdue to change my passwords anyway so I guess this is as good a time as any

LinkPizza posted...

If I did that, I wouldnt be able to log on to anything at all Or Id have to write them all down somewhere

Me too. Certain passwords like my banking passwords I use a unique, complex password for, but for shit like gamefaqs or social media I just use something I can remember, and I'm waaaaay more lax about changing them up

---

LinkPizza posted...

Same. Ill probably have to end up changing it constantly just from forgetting

Usually I would have an "!" or a "@" sign here and there. Just trying to change the Twitch PW now, I'm putting upper case, lower case, numbers, AND symbols and it still says my PW is too weak if it's like 8 characters. It's so dumb lol.

---

Done, its an easy, but hard to guess password now

---

Idk why people even care about data breaches at this point. It's impossible to keep our data safe.

---

Jen0125 posted...

Idk why people even care about data breaches at this point. It's impossible to keep our data safe.

Only data breaches I am concerned about would to do with my bank account, or credit card.
If I am aware of something like twitch, I will change it, just not to cause headaches down the road though. If I want to stream something I am playing, or whatever it is going on with that account.

---

Ogurisama posted...

Done, its an easy, but hard to guess password now

password123

---

Smiffwilm posted...

password123

Sure, why not

---

For sites where I'm not entering personal info (or using a fake name if they require one), have no intention of ever doing a financial transaction there, and so on...

I intentionally use really simple easy to remember and terribly insecure passwords.
Because frankly I don't care if it's hacked.
And like others said, every damn website gets hacked eventually and changing strong passwords around is really fucking annoying.
So anywhere I don't need a "real" password, I use a crap one. Honestly the most annoying thing is when a site w/ a login that I want to use a crap password on actually requires a number, symbol, upper and lowercase, etc... Like, "are you fucking kidding me? You think I'm going to bother coming up w/ and remember a complicated password for your site?!"

Is a password more or less secure if you convert it to base64

---

Clench281 posted...

and while you're at it STOP REUSING PASSWORDS AT ALL

how the fuck am I supposed to remember 30-40 different passworss

---

DirtBasedSoap posted...

how the fuck am I supposed to remember 30-40 different passworss

Apparently we're supposed to use password managers that are locked by a password and could prob still have a data leak

---

DirtBasedSoap posted...

how the fuck am I supposed to remember 30-40 different passworss

how many porn sites are you a part of that you need 30-40 passwords?

---

correct horse battery staple

Apparently I don't actually remember my Twitch password, so that's fun.

Far-Queue posted...

Me too. Certain passwords like my banking passwords I use a unique, complex password for, but for s*** like gamefaqs or social media I just use something I can remember, and I'm waaaaay more lax about changing them up

Pretty much. I'll tend to use unique, stronger passwords for higher-profile sites that are more likely to get hacked and/or stuff that really needs protection, but I've got a default one for stuff that doesn't matter as much that I reuse frequently.

---

I just freaking made my account like a week or two ago...

---

Ok, so thankfully* when I logged out I could just see my password when I tried to log back in.
Cause fuck twitch, they're one of those worthless sites that think they're hot shit, apparently. Needed #, symbol, cap and uncap, the whole works (and then they fuck up their security this badly... oh, the irony/hypocrisy.. making us come up w/ Fort Knox level passwords and then not protecting them on their end). Made up some random shit I never would've remembered.
I'm keeping it unless twitch forces me to change it.
I don't care. China can have my twitch password, fuck all good it'll do for them.

* Not out of fear of needing to reset my twitch password; fear of not being sure if it was one I used for other places

Jen0125 posted...

Apparently we're supposed to use password managers that are locked by a password and could prob still have a data leak

Fucking exactly! I can't stand it when people say to maintain dozens of different passwords or to use a password manager (ie, put all your eggs in one basket).

Thankfully my twitch account is part of the crap accounts I don't care about and have no investment into.
Also I have 2FA set up with it.

---

streamofthesky posted...

Fucking exactly! I can't stand it when people say to maintain dozens of different passwords or to use a password manager (ie, put all your eggs in one basket).

Password manager with 2FA

It might be one basket but it's a basket no one will get into

---

Unless..... that's exactly what they want us to do.... nice try TC....

Obviously jk.

---

My password manager is a piece of paper, so when im like "wtf was that password? Guess i'll check the notebook!", i'm all good.

---

Clench281 posted...

Password manager with 2FA

It might be one basket but it's a basket no one will get into

(On top of 2FA for individual accounts themselves)

If that's your approach, couldn't you just use one password for everything and 2FA the individual accounts and get the same security without the added step of the password manager?

---

Lokarin posted...

Is a password more or less secure if you convert it to base64

Yes, but possibly no.

Jen0125 posted...

Apparently we're supposed to use password managers that are locked by a password and could prob still have a data leak

How could a password manager like KeePass that saves the data locally have a data leak?

Go change your Twitch passwords right now

Make me.

---

TrainerNeo_02 posted...

Make me.

https://youtu.be/RWuEniepGhk?t=17

---

adjl posted...

If that's your approach, couldn't you just use one password for everything and 2FA the individual accounts and get the same security without the added step of the password manager?

That isn't the same security though. That's reusing passwords. If any of my individual random website passwords are leaked, no others are compromised.

---

Clench281 posted...

That isn't the same security though. That's reusing passwords. If any of my individual random website passwords are leaked, no others are compromised.

If 2FA means nobody will get into that one basket, though, doesn't it also mean nobody can get into any of the smaller baskets?

---

adjl posted...

If 2FA means nobody will get into that one basket, though, doesn't it also mean nobody can get into any of the smaller baskets?

This makes sense. If you trust 2FA for something that has all your passwords, then couldnt 2FA protect each site individually?
---

adjl posted...

If 2FA means nobody will get into that one basket, though, doesn't it also mean nobody can get into any of the smaller baskets?

Unfortunately a lot of services either don't offer 2FA at all. Or only offer it via SMS (which is susceptible to a SIM swap) meaning that if a determined individual knows your identity, account name and password, they could gain access to said account.

---

I had a 100+ bit password, and I had 2FA enabled anyway.

---