I do have a formula. I take the first 2 letters of the website then add a password that I like ( picked randomly from a nearby dictionary) and then add 3 numbers and a symbol. On letter is upper case. I can glance up at the name of a website and instantly know the password.

I do not use this formula for banking or anything to do with money. They are unique and changed often. And written down on paper.

Our new cloud based software at work requires everyone to chance passwords every three months. At least 8 characters, must have a number, a letter, and a character. You cannot use a password you have used before.

People are NOT happy.

Stick the next number in it. If you used a 1 last time, use a 2 this time.

Use a favourite phrase.....I love dogs for example with appropriate symbols for letters.

Use your regular password but put your fingers on the row above.

I read about a guy who had to change his passwords at work every month. He decided to use it as an "intention": he used a word that was important to him that month, like a something he wanted to work on that month (patience, 20pushups), or remember (kimsbirthday), etc.

I have a friend who keeps the "essence" of the password but replaces a letter with a number, ideally one that looks or seems like the letter. After enough changes over time, the password looks really bizarre, she says, but the change is gradual over time so it's not too difficult for her.

I use a similar password for everything and I have a password book to record them in. Mine are always a combination of numbers, symbols and letters but upper and lower case. For example, 12345@Hz Some sites don't like you to use a symbol, so thats the only difference. ;)

I use some item in my house that I'm looking at, plus the year. For instance: clothespinWreath2020. I have come up with some really weird ones that nobody would every guess! I do change my most important passwords, such as banking, etc at least yearly.

I do have a small address book atet I use to write down passwords--but I use a kind of "code".

If the site does not have something like credit card information there is nothing to keep a person from using the same password for multiple sites. I did have a site tell me recently that I had used a word that was part of the password previously. I keep a physical list of passwords so if someone would need access they can do so.

I keep mine in a database, plus I let Firefox remember them. I like the convenience, nobody else uses my computers, and I'm willing to accept the risk.

In Linux I wrote a script that generates a password and stores it along with username and site.

Adding a password looks something like this:

I'm not a Windows user and am not fluent in Windows Powershell but a bit of Googling gives me something that could be built upon, or even used as is.

Just two lines:

Add-type -AssemblyName System.Web
[System.Web.Security.Membership]::GeneratePassword(32, 5)

Save with an extension of ps1 (or just paste in the two lines to test) and run in/with Windows Powershell ISE.

The modify to suit your needs parameters 32 and 5 means 32 characters long, including a minimum of 5 symbols.

In use:

Of course, that just generates passwords, you'd still need to copy/paste them into a text file or whatever.

But if you're not a do-it-yourself-er like I am, that probably doesn't help at all.

Being a Firefoxer, I'd probably use it's password generator/manager if I hadn't already taken time to do my own.

The modified phrase passwords are a good idea. I do that sometimes on sites my phone might forget when I'm away from home.

Cat owners could just let their cat generate a more random password. Although uppercase might be difficult. :-)

There's no reason to go nuts with creating wild, unrememberable character sequences for passwords. Too many people needlessly freak out over this.

You are not liable for losses from unauthorized use of your credit card or financial account numbers. Whether on line, in a store, over the phone, or however.

Yes, you might be inconvenienced. And yes, identity theft can be a problem. None of these things are prevented by having a 12 digit password of meaningless letters, numbers and characters.

Keep it in perspective and make it easy for yourself.

Elmer, that sounds like a pretty frivolous attitude toward something that could possibly turn into a nightmare.

Elmer is being realistic. Any hacker who is doing it for a living by selling information is really only interested in your financial information. From experience of having my debit card used in several countries the bank rapidly took the steps to block any further usage. Put back what money was taken. If it had been a credit card the same thing would have happened. Most personal information is available on line from legitimate companies if someone wants to pay for it. I used to do some tracing of financials so am aware that a person with an interest can find all kinds of information if they just want to look.

Elmer is on track.

This is why many systems are moving to confirmation codes sent to your phone or email. Passwords are easily hacked.

My child, who is studying computer science, says at least 15 digits. Doesn't matter if it's upper and/or lowercase. Doesn't matter if it has symbols. It's the length. Bots will try sequences over and over until it gets hits, so the length is what stymies their luck. So I make mine phrases.

Bots have a program that simply runs through the various numbers, letters, and characters. When it reaches the correct one for that sequence the program then repeats for as many characters as in a password. It all depends on how the program is written if it stops at five for thousands. At one time when I was working we had a card that gave continuous random keys both that could be seen and some internal. Secure areas had many more keys than we did.

"Elmer, that sounds like a pretty frivolous attitude toward something that could possibly turn into a nightmare."

How so? With one unauthorized use (which would cost you nothing), your account numbers will be changed. Back to the beginning.

I've had a few instances of my numbers being compromised from large-scale data intrusions. The two I remember are once with Target (my wife bought something there and the account number was in their records) and I think another time with Home Depot, for the same reason. Numbers were changed. Also, an email break for one of my accounts that gave access to my historical emails and passwords. Nothing happened.

Every person or company you give or send a check to has your account number and routing number. Does that worry you?

Professional ID theft is something else.

A risk isn't a risk because it's possible. Only if the possibility of it happening is likely does it deserve anyone's attention and concern.

Lots of things are possible. If you want to avoid risks that are possible, stay out of automobiles. People are killed in them every year.

Sites are starting to use the 2-factor authorization. Even my site that I receive online surveys is doing that. I don't like them. You sign on with your password as well as use the code that they send to your phone.