Unpopular opinion: Keeping one strong password is better than switching them up
I know most experts say to change passwords regularly, but I think that's outdated advice. My main bank account has had the same long password for years, with no security issues. From my own reading, a lot of attacks happen because people reuse passwords on shady sites, not because one gets cracked. If you force yourself to change passwords often, you're more likely to pick something easy to remember but weak. In my painting business, I have online accounts for ordering materials, and constantly updating passwords just means I might forget them or write them on a sticky note. I'd rather spend time making one really good, random password and use a free tool to remember it for each site. That seems way more secure than cycling through slight variations. What's your take on this?