NordPass

9/ Bottom line: convenience wins until a breach lands. Move critical accounts to unique passwords, turn on MFA, and let a password manager like NordPass handle the rest 👉 nordpass.com

8/ National quirks: 33 % of German reusers say “Never had a breach, so I’m fine.” In the US, 60 % blame too many logins.

7/ Generation gap: Gen Z shows the highest reuse rate, but Baby Boomers spread each reused password across the most accounts.

6/ It gets riskier: among people with only 1–2 go-to passwords, 50% skip any tweak. Of that group, 42–44 % in the US/UK and 36 % in Germany reuse those basics on 5 + sites.

5/ About two-thirds claim they “change” reused passwords, but most edits are not really edits: adding ‘1’, ‘!’ or swapping 2024 for 2025. Attackers script those patterns first. If you can devise the tweak in seconds, so can their bots.

4/ Why reuse? “Easier to remember” tops the chart in the US (57 %) and Germany (54 %). In the UK, the same amount of respondents fear forgetting unique strings. A password manager solves both: generates strong passwords and autofills them so you never memorise them.

3/ 20% of reusers use that one favourite password across 10 + sites: social, banking, work.

2/ 3 reused passwords cover most of those 130 logins. Lose 1 and dozens of accounts unlock at once. Quick self-check: write down every password you can recall unaided. If the list is under 10, you’re — vulnerable.

1/ 🧵 Surveying 3 000 adults in the United States, United Kingdom and Germany we found people manage around 130 online accounts. Under that load, 59 % of Americans, 58 % of Britons and 49 % of Germans reuse passwords. Let’s see what else we found 👇

Catch up with NordPass in Q1 of 2025 From media appearances to feature upgrades – learn what the NordPass team has been up to in the first quarter of 2025.

That’s the first quarter all wrapped up ✅ We’ve kept ourselves busy with new projects like granular policies and exciting updates for #iOS18. We’ve also garnered knowledge about cybersecurity and AI threats thanks to our team of experts 🧠 Read more in our blog ➡️ nordpass.com/blog/product...

16/ It’s a feature that gets smarter.

Curious to see it in action? Try NordPass today and experience autofill that’s not just convenient but also secure, and endlessly improving 👉 nordpass.com

15/ Autofill’s consistent reliability also comes from constant iteration:

- Adding new rules and keywords to adapt to evolving web standards.

- Retraining models when patterns change.

- Improving submit button detection to refine form boundaries.

14/ And lastly, there’s the matter of massive forms.

Some websites think it’s a great idea to stuff 50,000 characters of text into a single form, just like that. (Why? Who knows?)

NordPass is designed to skip the bloat and opt for alternative solutions, to avoid slowing your browser.

13/ The ability to revisit forms dynamically allows autofill to stay one step ahead – even when forms aren’t cooperative.

We constantly fine-tune this process, adapting to the ever changing quirks of contemporary web design.

12/ But there’s more that Autofill has to deal with:
Animations and boundary detection errors.

When fields load via animations or after interactions, the system re-scans in real-time to ensure accuracy.

11/ This way, NordPass autofill stays secure and accurate, minimising risk while consistently improving through iteration and updates.

10/ If the model is confident enough, autofill works. If not? Nothing happens.

NordPass doesn’t gamble with bad guesses. For example, if the top probability is only 40%, autofill won’t act. The system uses thresholds to ensure reliability.

9/ Once labeled, forms are converted into numerical vectors – essentially, a way to feed them into the ML model without making the model weep.

The classifier uses a softmax as the last activation function (which, despite sounding cuddly, is just math) to assign probabilities to form types.

8/ What is a username? Is it an email?A phone number? A name? All of the above? Neither?

These human decisions guide the ML model, making it smarter over time. It’s teamwork – humans provide judgment and adaptability, algorithms handle speed.

7/ And when forms get too weird, NordPass engineers step in (yes the real flesh-and-blood humans) to manually label and define the rules to teach the ML model what’s what.

This process is both painstaking and strangely philosophical.

6/ But some forms are, like, really ambiguous.

Take AWS forms, for instance. One field might say “Account Name” and another “Email” and there might be one labeled “Phone number.”

Care to guess which one’s the username? It’s not always obvious.

5/ Here’s how it does that:

- It looks for submit buttons to figure out where the form begins and ends.

- It extracts features like password fields, text inputs, and links.

- It even recognizes different languages.

4/ Now you’re thinking: “OK, so why not just fix the forms?”
That’s cute. That’s like asking why we don’t just fix the internet.

NordPass does the next best thing: It embraces the chaos.

3/ You see, web forms are not as cooperative as you’d think. They’re chaotic, inconsistent, and often downright antagonistic ML-wise.

Some forms hide fields behind animations. Some lack clear boundaries, lumping unrelated fields together.

2/ Autofill is not magic. It’s a Machine Learning (ML) powered classifier that stares at a form like a puzzled student over a test:

“Two inputs. One says password. What am I looking at?”
“Login? Registration? Help.”

And yet, it gets it right.

1/ Autofill is one of those things you rarely think about. It’s click, fill, done.

But behind the scenes is a system juggling bad HTML, hidden fields, and the occasional philosophical debate about what a "username" even is.

Let’s break it down 🧵

14/ And remember: it’s not just about this tax season. Cybersecurity is an ongoing effort. Small changes in how you manage your online presence can have a big impact on your peace of mind all year long.

13/ Need help improving your passwords and securing your accounts? Check out our Password Generator 👉 nordpass.com/password-gen...

12/ Cyber crooks are more sophisticated than ever, but so are the tools and strategies for protecting yourself. A few simple steps can save you months of stress, lost funds, and compromised data.

11/ Finally: multi-factor authentication (MFA).
Activate MFA on your IRS account. It adds an extra layer of protection beyond your password, requiring a second form of verification, like a text or app code.