You have bought yourself a new device, like networked storage or a router. You go through the process of installation, use the default password ”admin” or ”1234” or whatever, install it and then change the password. It is just common sense, right? Well, many Americans are seemingly failing with the last part of the process, because lawmakers in California want to ban such default passwords. Their reasoning is that the Internet is plagued with malware that is good at finding out devices with weak security measures and can infect your computer even during the few minutes between installing a new device and changing its default password to something more difficult to break. Californian state senate want to avert this danger by forcing companies to do one of two things: making it so that creating a new password is part of the immediate setup process for the devices, or creating unique password and username for every device. Seems legit.