>The ideal solution is to come up with a secret heuristic to come up with different passwords for different services. How long does it take you to enter severa

>The ideal solution is to come up with a secret heuristic to come up with different passwords for different services. How long does it take you to enter several keys of 16+ length for a few sites you might to access? A password manager can autofill, retrieve and input keys, provide an OTP in a few seconds. Where would you store your emergency codes and other secret-like artifacts? It just seems impractical for a person, let alone edge cases like sharing, or usability concerns like working with secrets frequently throughout the day. >I've never been hacked, never been locked out of any accounts. Due to the strength of your system, general digital hygiene, or simple odds? If we're getting really contrived, how do you maintain confidence your heuristic can't be guessed from X plaintexts obtained from breached sites (highly common)? That's kind of like rolling your crypto, isn't it? -- doing it correctly is beyond almost all of us.