Thanks! I agree, there are a few issues with SGP I would fix: It fails badly on Change Password forms, it uses ~10-iteration MD5 hashes which are easily-revers

Thanks! I agree, there are a few issues with SGP I would fix: It fails badly on Change Password forms, it uses ~10-iteration MD5 hashes which are easily-reversible today, and the default character set for the generated passwords is not great. I feel I'm still in the "research" stage where I want to see if I can survive with using something like SGP. I'll definitely switch over to the extension from now, though. Side note: It's probably not a terrible idea to still maintain multiple master passwords for really-important vs throw-away accounts.