kaspersky password manager flaw bruteforced passwords

They're all completely independent, so any of them being compromised (which, again, is an extremely common event) becomes completely meaningless. Any one of them being revealed gives no useful information about any of your other passwords. Randomly-generated passwords don't have these issues at all (when done better than Kaspersky did, anyway). Changing the formula can help with this, but it also makes the system way harder-how do you know which formula to use when you're logging in? Do you go back and change all of your passwords every time you rotate formulas, or if one of your passwords is compromised? Even more complex formulas could be possible to figure out (or massively reduce the brute-force difficulty) if just a couple of your passwords leak. If it's a really obvious 'formula', like if your Tildes password is mysecretpasswordtildes, someone could easily guess that your reddit password might be mysecretpasswordreddit. Every revealed password gives info about how you generate your passwords. The problem with using a formula is that it's just a more-obscure method of re-using a password. Because of that, your method is still good advice overall. This is why the single most important thing is to not re-use passwords, regardless of how you pick them. All of your accounts are now compromised because one was.

If you use the same username and password everywhere, this is obviously a complete disaster. This is so common that I'd be surprised if there's anyone that uses the internet frequently that it hasn't happened to, and most people have probably been affected by it multiple times (I certainly have). The most realistic security threat to almost everyone's accounts is that there is a data-breach on a site they registered for, which reveals their username (often their email address) and password. While I wouldn't really call your opinion wrong, I think it puts too much weight on the wrong factors, and ends up being worse advice for most people.

Kaspersky password manager flaw bruteforced passwords