LastPass always represented a single point of failure for me, although still bettter than what people usually do - same password across all services.<p>I recall one interesting method involving no third-party services is a concatenation of a random string combined with some of the letters of the service I&#x27;m using. E.g. the first and last letters of the website I&#x27;m on. So if the random string is xPv4rz and I&#x27;m on HackerNews, the string becomes hsxPv4rz.