I have come across many users who maintain a re-used password for each and every website, such as
The problem with this approach is if someone breaches the protections of a particular website then user security will be in vain.
Many websites still store passwords in the database in an unencrypted format. Suppose I have access to the database of a particular website. Then I can steal the username and password and just imagine the havoc that I can create with the users who re-use passwords for every website/portal/platform.
How to solve this problem? What algorithm should a user follow to maintain the password for different websites/portal who have no knowledge of security and other technical stuff?
This question is intended for general purpose users who don't have any knowledge of security, so tools like password card, password manager or hash tools not going to solve the problem.
Instead how about having the password like
domain_name + combination of unique keywords per website + unique special characters per website ?