Hacker News Reader

Comment by archerx | Hacker News Reader

Base password plus company name or initials. One password mutated into infinite variations that are easy to remember. This has been working fine for me for at least 15 years.

View on HN

What do you use for the base password? The website name?

So if someone finds out your password for a certain site is `Facebook1234ABCD` they have a fair guess at every other password?

Same applies for `MyPasswordFB` using the reverse method.

My base password is secret but it is an alpha numeric string with mixed caps. An example would be “p45Sw0rD-Apple+” something in that vain.

So in the end the password contains numbers, letters both capped and lower case and special characters.

I think their point is that no matter how secure your base password is, once one site leaks it, the bad guy basically knows your password to every site.

I have been using the internet since the 90s, my Hotmail account is 23 years old and I have never lost any of my accounts. I think it’s working quite well in my experience.

It will, right up until the day it doesn't.

You just need one little website to leak passwords in plaintext and all your passwords are up for grabs.

I used to do the same thing and I stopped for that reason.

It should work for another 23 years. I’ll keep using my system that works.

This is one of those things that works until it doesn't, though.

or it just continues working for another 23 years. Do you have a password system that has worked successfully for as long? Just because you “feel” that it’s not good doesn’t mean your feelings are correct.

Reply on news.ycombinator.com