Hacker News new | past | comments | ask | show | jobs | submit login

I'm a bit low-tech in regards to my password scheme, but here's how I do it:

First, I generated an 8 character password using pwgen (great program, btw) that is just mixed-case. I then add several characters based on the name of the website/service I'm logging into.

Using this, I can easily remember my password to everything, and each one is unique.




Even that is not particularly secure since if someone discovers your password is "j8t3$£$hackn", they could easily guess your amazon password is "j8t3$£$amzn" and your reddit pass is "j8t3$£$rddt". Or brute force just those last few chars and benefit from a much reduced search space.


If you are adding to the 8 char password you aren't creating unique passwords. They share the initial 8 chars with each other. Still, this method is much more secure then using password.ly.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: