My friend Lisa called me last night, voice shaking. Someone had cleaned out her PayPal. Then her Amazon. Then they tried her bank. Three accounts in 40 minutes. The criminals never touched her passwords. They didn't have to.
They had her email.
Think about what lives in yours right now. Bank statements. Medical results. Your retirement account, your mortgage company, every streaming service, every store you've ever bought anything from. And here's the part that should stop you cold: every password reset link on the planet gets delivered straight to your inbox.
A criminal doesn't need to hack your bank. They just need your inbox. One account. Every other door swings wide open. That's not a flaw in the system. That's how email was designed to work. And most people protect it with the same password they've been using since the Bush administration.
More Info