I use the same scheme with minor variations. The most annoying thing is "secure password requirements" ("your password must have digits", and it happened that g

I use the same scheme with minor variations. The most annoying thing is "secure password requirements" ("your password must have digits", and it happened that generated one didn't have a single digit) or limits (I'm fine with encoding-agnostic 7-bit-ASCII-only, but "8 chars max" or "may only contain alphanumerics" frustrate me) on some sites, which force me to step away from this scheme. In fact, there are way too many exceptions out there in the wild. One still needs a notebook of some sort for such cases. Also, the last time I've logged into Bitbucket (I [almost] don't use it, but I have the account) I forgot that I logged there using OpenID instead of login-password pair. :)