Everyone should use lastpass.com and generate the longest password a site will accept (or just 32 random characters/numbers is sufficient imo) plus save that on lastpass.com
It's too easy and there is no excuse not to do it.
It's too easy and there is no excuse not to do it.
NO! Everybody should use a long (16+ character) password with mixed upper- and lower-case letters, numerals, and symbols, but SHOULD NOT generate or store that password on lastpass.com or ANY third-party password service. Use of such a service is placing the security of your information in the hands of a third party. That's NUTs.
Instead, use a password vault or a simple GPG-encrypted text file on your own laptop or personal computer, backed up to a CD/DVD or a USB dongle that is kept offsite. Encrypt that one file with a long passphrase, and do the work to memorize the passphrase. Voila -- actual security instead of security theater.
(I'm shaking my head at nutty idea that passwords should be entrusted to a third party that you don't even know.)
