1. There was an lj password breach. If you haven't changed your passwords since 2014, you probably should. (If you can't remember if you have, you probably should anyway.)

2. It is leading to the usual spate of recommendations to use a password manager. So here, password manager proponents, here is your chance to finally sell me on one: what happens if you use a password manager, and then you are in a situation where you no longer have access to any of your devices, and are using a shared device where you can't install apps or extensions? What is the workaround for this? Are there password managers that could be used on a computer where you can't install things?

The only thing I can think of is to make sure the email all your password recoveries go to has a password you actually know by heart. But it seems like at that point you have also managed to workaround the point of having a password manager.

This may seem overly paranoid, but I work at a public library. We are the place people come when they have lost access to all their devices but desperately need to get into their email/social media right now. I have seen everything from disaster evacuees to domestic abuse escapees to 'I'm travelling and left my phone on the train'. To the best we can do for them, if they don't know at least an email password by heart, they are stuck.

(This is also why any two-factor authentication that requires you to use your smartphone sucks. If you are an app user who is having to log into a new device on short notice there's a fairly good chance it's because you can't use your smartphone. Please stop tricking people into activating this without understanding it, websites!)

The more effort these people have put into securing their accounts, the worse off they are. So if there is a way to get around this and have a password manager that works for people who might have to flee with only the shirt on their back, I would love to know it.