I've typed my most sensitive password on public IRC once. I assumed my screen was locked while my display came back to life after sleep mode. For some reason, m

I've typed my most sensitive password on public IRC once. I assumed my screen was locked while my display came back to life after sleep mode. For some reason, my screen wasn't locked and the IRC window had the focus instead. The great thing was that, even though that was my most sensitive password (the only that unlocks my desktop and encrypted folders), it didn't matter because all I had to do was immediately change the password in the only two places it was used. I will never trust generation of site-specific passwords from a single master password. Too many things could go wrong. There could be a bug in the derivation algorithm, crypto might become brute-forcable, etc.