These arguments aren't convincing me. I still like devit's idea. > Can't possibly work. Everyone is going to have their own notebook for passwords, protected b

These arguments aren't convincing me. I still like devit's idea. > Can't possibly work. Everyone is going to have their own notebook for passwords, protected by rubber band. Yay. I don't consider this a bad thing per se. A notebook of secure passwords is a lot better than dictionary passwords. (Dictionary in the sense of a leaked password dictionary.) > Chances are your "reset password" feature will be DDoS-ed into oblivion by your legitimate users. I had a co-worker who, on most sites, set passwords by mashing the keyboard and then always logged in using the reset password functionality. I also don't see the problem with this.