<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>I share Derek's concern about data breaches. I also share the
concern that Steve pointed out about the single point of failure
on a piece of paper (paper does have other disadvantages,
including lack of sort and lack of copy-paste). Plus, I'm ornery
and cheap.<br>
</p>
<p>I have my own Web site, so what I do is to have a text file
that's on the Web but unlinked. It has two kinds of passwords. For
sites I'm not that concerned about, in the text file I have a
password hint that I'm quite sure only I and one or two close
friends could understand. For the more important sites, I use a
random password (I have a short ruby program that generates them
but it's easy enough to make up random enough passwords). But
there's a secret but easy transformation I must manually do to the
password that's in the file after I copy/paste it to the site I'm
trying to log in to.<br>
</p>
<p>I can use this anywhere, with my phone or computer. Of course I
have backup copies.<br>
</p>
<p>All of this would be much simpler to crack than trying to break
into Dashlane or whatever, but given the target size and value,
I'm quite confident that nobody would go through the trouble.<br>
</p>
<div class="moz-signature">-- <br>
<p style="font-family: Times, serif">
Jon "Cut 'Em Off At The Password" Dreyer<br>
<a href="http://www.passionatelycurious.com">Math Tutor/Computer
Science Tutor</a><br>
<a href="http://music.jondreyer.com">Jon Dreyer Music</a>
</p>
</div>
</body>
</html>