I’m so fucking sick of Google and other sites ratcheting up ““security”” and bullshit steps to “”“”“”“”““protect””“”“”“” me when they don’t give half a rat’s ass about any individual welfare or security. like they literally don’t give a shit about any of us but this stupid fucking forced 2FA crap and mobile-tied-to-all-account-actions-on-desktop Google got aggressive on is pissing me off beyond anything else. this shit is forced on us only to remove themselves from any claims of liability.
I use a password manager for years (keepassdx & keepassxc) to generate absurdly long random passwords and change them at least yearly. no shady downloads on my PC, no pirated stuffs of any kind, I’m computer savvy in general and run a tight ship. recently trying to clean up (log out) some old mobile sessions on my Google account, and change my main account password, things I’ve done quickly and without hassle in the past. suddenly being asked for password AND forced to tap the stupid fucking number sent to my Android phone, which of course I don’t receive because it’s sending to some stagnant Android session that was overwritten by my various Android and GrapheneOS installs (tinkerer).
completely stonewalled on my own account now. can’t change password any more because the shitty little kindergarten secret passcode doesn’t send to my current accessible Android install, can’t log out old devices to keep it from being sent to those. tangential note, last year the rent payment portal for my shithole apartment added forced 2FA to all accounts too, never had it before and shit was just fine, but now an extra step and waste of my fucking time just to pay the do-nothing landleech who lives in a different fucking state.
so fucking pissed I could break someone’s face rn. fuck everything. fuck capitalist-infected software. fuck techbros. fuck Google. fuck AI. fuck Flock. so tired of this endless fucking bullshit that keeps getting worse. thanks for hearing my TED talk.


Randall Munroe is comparing to a way weaker password. Just one word with some snapped out character and some special characters.
I don’t think 7 words are practical to type in any more. And honestly 4 words should be fine, more important that you don’t reuse the password. And you have to trust the provider to no longer use md5 in 2026.
Yea it is all very case by case, depending on threat profile etc etc