Got a SPAM that had one of my passwords in the title. I need a new system.

[Dennis S]

It was one I used for several sites. I know you shouldn't do that. I had made tweaks to it so this exact one was for maybe three sites. Anyway, I'm going to remove all vestiges of it and use separate, more complex passwords for everything. One big tip I've found is to not spell any known words correctly because the correct spellings are in the dictionary the bad guys use. I assume that goes for names too. I don't want to use one of those single password apps. Any suggestions?

[Sarcany]

Go here to see what other credentials have been compromised:

https://haveibeenpwned.com/

[mattkime]

Dennis S wrote: I don't want to use one of those single password apps. Any suggestions?

Revise your opinion of password apps.

[rjmacs]

Roll your own algorithm?

[datbeme]

rjmacs wrote:
Roll your own algorithm?

That guy's system is beyond awful. Marginally better than your dog's name backwards. Please tell me he is being satirical.

[rjmacs]

datbeme wrote:
[quote=rjmacs]
Roll your own algorithm?

That guy's system is beyond awful. Marginally better than your dog's name backwards. Please tell me he is being satirical.
No, he's trying to get the 90% of people who use exactly the same easily hackable password on every site to do something less awful. He's giving bad suggestions about how to do that, but if you're smart you can modify his method to come up with a system for creating reasonably hard-to-crack, site-specific passwords.

The reality is, a good encrypted password manager with an unguessable master PW is still best.

[Dennis S]

This is helping a lot:

http://www.passwordmeter.com/

I'm crafting my own algorithm that is memorable and has quirks that will throw off any attempt at guessing the password and is easy to type. I get 100% every time I test a password. I'm working on a system so I can write prompts on paper or in an email draft and easily recall the password, yet be unintelligible to any snoopers.

[Buzz]

What about sites that make you change passwords every 3 - 6 months, and have restrictions on how similar each new pw can be to prior ones?

Need a better algorithm for those sites.
==

[AllGold]

Dennis S wrote:
This is helping a lot:

http://www.passwordmeter.com/

As long as you don't use a word that is easily guessed or vulnerable to a dictionary attack, I don't get why those rules are supposed to do any good if we're talking about a brute force crack attempt (computer trying all ASCII character combinations).

Can anyone explain what I'm missing?

[RAMd®d]

Could you elaborate on how your password was used in the subject line or title?

'Hey, we know your password is abc1234, and Viagra will change your life'?