That's a valid point, although I suspect the algorithm subscribed is just about complicated enough to tempt you to write down frequently used passwords anyway.

That's a valid point, although I suspect the algorithm subscribed is just about complicated enough to tempt you to write down frequently used passwords anyway. You could carry around a little pwdhash implementation on a smartphone or whatever, I suppose, the algorithm isn't rocket science: http://crypto.stanford.edu/PwdHash/RemotePwdHash/hashed-password.js http://crypto.stanford.edu/PwdHash/RemotePwdHash/hashed-pass... It's a pity this sort of thing wasn't build into the input type="password" in the first place ... maybe HTML5 should introduce an input type="passhash" ...?