Users should use and reuse weak passwords for websites which don’t hold valuable information, say researchers from Microsoft, overturning decades of accumulated wisdom on internet security. By not having to worry about remembering complex unique passwords for every individual website, users can focus their efforts on recalling secure passwords for high-value sites like banking or e-commerce. What’s more, the researchers, Dinei Florêncio and Cormac Herley from the Redmond-based software company and Paul C van Oorschot from Carelton University in Canada, argue that password managers introduce more problems than they solve. While they allow the use of fully random, completely unique passwords, they also introduce a single point of failure: users can lose or forget the password to their password manager, or the cloud service that hosts their passwords could be hacked.