Security review: weak, reused and old passwords

What it flags

• Weak: a password that would be quick to guess.
• Reused: shown as “same password as 2 others”, and so on.
• Old: shown as “Over two years old”, for a password that hasn’t changed in more than two years. Remem counts from the password’s last change; for a password saved before Remem recorded that, from its history, or else from when the item was created.

What to fix first

Items are ranked by how much damage the account could do: Accounts that unlock others (email and sign-in providers, which can reset everything else), then Money, then Work, cloud & domains, then Everything else, which can wait until you next sign in to each.

1. Start with the item under Next up.
2. Select Open the site (or the “Change on…” link for known providers) and change the password there, using the generator.
3. Select Update in Remem and save the new password.

If an item is flagged and you have a reason to keep it, you can hide it for a week or stop flagging it; it moves to Ignored, from where you can bring it back.

Why there is no breach check

Remem sends nothing from your vault anywhere except, encrypted, to your sync server, so it doesn’t check your passwords against breach databases. The review is computed entirely on your Mac.