Got roasted in a code review for using the same password on 3 test accounts

Last week my senior dev pulled me aside after a security audit and said "dude, your test DB passwords are all the same thing." I felt like an idiot because I just copied and pasted the same credential for three different environments without thinking. She made me watch her generate unique 20-character strings for each one and store them in a vault. Now I use a password manager even for my dummy accounts and honestly it feels way more professional. Has anyone else gotten called out for lazy password habits?

2 comments

2 Comments

janah8311d ago

Why waste time on 20-char passwords for dummy accounts nobody's targeting? Seems like overkill when you're just testing basic login flows.

milarodriguez10d ago

Might as well use "password123" at that point and really lean into the whole dummy account vibe. Nothing says "please ignore me" like a 20-char password on a test login that's just screaming for attention anyway. But hey, if it makes someone feel like a security guru while testing basic stuff, let them have their moment.