I was thinking about password security this morning. Mainly, about the recent adobe hack releasing thousands of passwords.
The current problem with existing passwords is that you have three options:
- Use the same password on every sites
- Use a few passwords for different sites (bank accounts, game websites/accounts, email, etc all get one
- Get a program such as lastpass which must be installed to every computer you want to use to login to a website.
The former two are very insecure but are easy to remember. The latter is very secure, however inconvenient because you can't use it on, say, a public computer. This basically locks you out of any computer that you don't have install permissions on.
So I thought of this idea:
- Start with a secure base, like
fWi3$aLjthat will be used on every website
- Add the first three letters of the URL to the end of it, so that every website gets its own password
- Add a 1 for .com, 2 for .net, 3 for .org and a 4 for anything else to the very end
- For example this website's password (with the above secure base) would be
- Every website gets its own password (except in rare cases, but then the password will be applicable to very few other websites)
- It's very secure password as you only have to worry about remembering one, so you can make it very complex (because you won't have to remember a new one for every website)
- If a database is leaked or your password is found in any other way you only have to worry about changing the password to that website
- You don't have to remember multiple passwords
- Unless you tell someone, there's no way for anyone to figure out you're doing it
- You don't need any special software or anything
So I was wondering if there are any downsides to doing this. I just came up with it today however I think I may go and change my passwords if there are now downsides.