> I'll point out that if you creates those passwords yourself, rather than using an entirely random generator, they likely have less entropy than you think, and

> I'll point out that if you creates those passwords yourself, rather than using an entirely random generator, they likely have less entropy than you think, and so are more crackable. So true. I generate my passwords separately, for the simple reason that I haven't yet found a pssword manager that would fit me perfectly. Pass is getting relatively close. In the meanwhile, I keep my passwords either on [LUKS] encrypted partition or a GPG protected file. I can even disclose the exact method I use for generating these passwords: head -c 9 /dev/urandom | base64 - For high-value targets or if I'm feeling a bit more paranoid than usual, I go for 12 octects instead.