[mothered]

I suppose, though, if someone really wanted to hack you, not having a storage service would just make it a tad harder at the most.

Having a strong password Is only one factor In securing your account.

The password recovery options on any given account, Is the weakest and most vulnerable point of access to "reset" the password. For Instance, Google accounts (for example, Gmail) use 6 digit verification codes to reset the password on the account when selecting the "Phone Text/SMS" option during the account recovery process.

Anyone. from any device and any location can generate the code to the cell phone of the rightful account holder. The verification code reads "Your Google verification code Is 760992", which does not denote It's objective. Those who have never accessed the recovery options and performed a recovery on their account, wouldn't have a clue as to "why" they've received the code. As a result, It's very easy to SE your victim for the code, and reset the password on the account without any other form of authentication.