[tensor]

When people had to rotate passwords every month and choose a new one according to insane complex rules and dictionary tests, well, that was not convenient. You would probably say it's good.

Reality: people started writing their passwords on sticky notes by their computer. Possibly the worst outcome.

Convenience is part of good security.

[jrm4]

Why the worst outcome, though? "Sticky notes" are absolutely superior to third-party password managers in regard to "attackers."

Third-party password managers INCREASE your threat surface by orders of magnitude more than sticky notes, period. They change the number of holders of secrets from two to three, and that third one is now a juicy target. This is not theory, this has happened frequently.

Sticky notes (even better, a little private physical notebook) keep this limited to your physical location which is much easier to secure; the grandmas and grandpas I know who do this (I do similar) have a far better track record than anything else.