Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

A person only has so many memorizable passwords that they can hold at a time; the entropy source is very very low rate. Revealing any memorizable password to stupid random sites is itself an antipattern.


I use a pass phrase salted with the first n characters in the name of the site, so I only have to remember one password and have unique passwords for all accounts. For example, monkey + ycombinator = myocnokmebyi




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: