Startup · Belanda
Researchers tracked the passwords 154 people used online for an average of 147 days and found them logging into 26 websites with fewer than 10 unique passwords — roughly 60 percent were reused outright or built from pieces of passwords they were already using elsewhere
For about five months, a browser extension sat quietly on the home computers of 154 people and watched them log in. The researchers never saw a password. Everything was hashed on the machine before it went anywhere, leav…