I always want salt on my hash
"prior to the breach, passwords were hashed but not salted."
sprinkling some salt on my hash now.
I normally dislike social media, but admit to having a linkedin profile. got the warnings from linkedin, the first one being an e-mail from 2AM, and the 2nd when I attempted to log in [I logged in specifically to reset my password, convenient].
So yeah, they wanted me to reset my password, and so did I.
Funny, when I logged in yesterday, I couldn't find the "change password" command and got caught up in updating my profile (and forgot to do it). This morning I remember "I didn't change the password". Well, they 'helped' and made it easy. Looks like 'I forgot my password' is the fastest way to get there.
Maybe THAT is the problem - make it easier to ACTUALLY! CHANGE! THE! PASSWORD!!!