Dear online services everywhere (in particular PayPal),
You do not increase security by asking browser not to remember passwords. You decrease security. The consequence is that either I defect to another service, or I go with the equivalent of “password123” on your site.
Allowing my browser to remember the password increases security, because then I typically just let my browser generate a 30 character random password. This password is encrypted and securely transmitted to all my devices. Only I can access it using my personal code.
Case in point: I just had to order some software. I went with Paypal out of laziness. Then Paypal was bothering me with my password, which of course I don’t remember. I used to just have it stored securely in my browser, but noooooooo, now Paypal disabled autocomplete of my password. Instead of bothering with recovering my password, I went back and paid with my American Express, which is securely stored in my browser. I did not even have to get out my card as I remember the security code. Paypal, by pulling these tricks, you make yourself redundant!
Also, a heartfelt fuck you!
Not at all sincerely,
Michael
PS: See, this is much easier:
