Hacker News new | ask | show | jobs
by drivebycomment 2647 days ago
A unique random password doesn't matter much, as a lot of hijackers use password obtained using malware or phishing. Practically no account is hijacked through brute-force attack nowadays - in most cases it's impossible, and even when it's possible, it's unnecessarily costly and time-consuming for hijackers.

What you want is u2f (hardware security key), and if you don't want u2f for some reason (e.g. cost or usability), use some other 2-factor authentication methods. No amount of "randomly generated" password will make a difference for malware or phishing, which account for majority of account hijacking.