&gt; I recall one interesting method involving no third-party services is a concatenation of a random string combined with some of the letters of the service I&#x27;m using. E.g. the first and last letters of the website I&#x27;m on. So if the random string is xPv4rz and I&#x27;m on HackerNews, the string becomes hsxPv4rz.<p>I don&#x27;t see this as really that useful -- if someone gets your password from two leaks they can probably figure the pattern out as well as you can.