crugthew

I get your point, but frankly, if a website does not allow special characters, then you probably should not use it.

I'm not stating that this approach is a catch all solution. It simply aims to be non dependent on any other third parties and generate unique, but memorable passwords for all the websites we need.

Thanks! Perfect security does not exist. It's the same as if the master password to a password manager app would be leaked, what then? You start from scratch and change the system.

If a plain-text version would be leaked, that's the worst scenario. But in in most cases what could be leaked these days, is the hash. So you can change the password by modifying the context. For example, if you log in to "microsoft.com", you first used `ms` as the context string, so change it to `microsoft` or `m$`, or something else. You would still likely remember that quite easily.

What this tries to solve is to be secure, unique for each account and not rely on any other third party.