New security issue at Dropbox
A slight tangent...<p>I recently looked into password managers myself after the MtGox leak. I tried 1Password and LastPass. While both do what they say--I found them cumbersome to use.<p>I settled on a scheme like this:<p>E-mail: Very strong, completely unique. 2-factor auth. If you have my e-mail, it's game over.<p>Bank: Very strong, completely unique.<p>The rest of the passwords I've broken down into tiers. I've memorized a password for each tier combined with a hashing algorithm stored in my head.<p>The theory here being if an entire tier gets compromised (someone figures out my hashing scheme), at the very worst I lose the entire tier.<p>This does keep me safe from automated attacks, but not if someone singled me out individually. Which in that case, I've got other problems.<p>This isn't perfect, but it gives me a couple of things I really value:<p>- Keep all passwords in my head<p>- Unique passwords on each site<p>- Tiered passwords so if someone figures out my hashing scheme, they only get that tier<p>I like the idea of password managers, but in practice they were too much hassle for me.