> That's a bad idea That's a compromise. The best idea is to memorize a totally unique machine-generated password for each separate site and service. But th

> That's a bad idea That's a compromise. The best idea is to memorize a totally unique machine-generated password for each separate site and service. But there can't be more than a handful of people in the world with the skill and drive to do that correctly. There needs to be some degree of tradeoff with accessibility, or you're just designing security for spherical cows in a vacuum. I think a security savvy person using the function approach correctly is in much better shape than most people, and indeed most security professionals.