* descriptive, long passphrases, that I usually have no trouble remembering. e.g. Facebook could be "I talk to my friends". * salt to make stupid password rule

* descriptive, long passphrases, that I usually have no trouble remembering. e.g. Facebook could be "I talk to my friends". * salt to make stupid password rules happy and to make it somewhat safe to write down passwords. e.g. "mysecretsalt42$". This gets appended to all passwords and doesn't get written down anywhere. * encrypted text file, used rarely when I forget a password. e.g. `vim -x socialmedia.txt`. I find this a bit better than Keepass or pass because it's not one obvious attack target (both the file and app). * optionally, a paper backup