I've been using a system like this for a while. It doesn't need to be as complex as this article suggests. Something like this would work fine: Get the domain

I've been using a system like this for a while. It doesn't need to be as complex as this article suggests. Something like this would work fine: Get the domain name, take the first 3 letters, reverse it, replace each character with the character that sits to the right of it on a keyboard. Append (or prepend) this to an already secure, remembered, password. The only way a person can know which part of the password is variable is if they have access to two passwords generated by this system, from different sites. Highly improbable. Moreover, even if they do figure out which part does change, they have to try to reverse the algorithm.