Ok, fine. You convinced me. I currently have a password scheme that allows me to create an easy to remember unique password for each site. It has some problems though, when sites have stupid password requirements like, "Your password is too long", or "A character in your password is illegal".

It's possible that SuperGenPass might create a password that is too long as well (default is 10 chars, the bookmarklet generator lets you change the length to something else if you think 10 is too long, or too short).

Chris says that he purposely left out extended chars so that the passwords would be more compatible... however, some sites might so as far as to *REQUIRE* non-alphanumeric chars. Or that you rotate your passwords every 6 months. In these rarer cases, he flat out says: "just don't use SuperGenPass for this particular website".

He also gives instructions on how to add in extended chars to the bookmarklet manually.

You can pretty much tailor this to your needs.

Well, I'm giving it a try. So what happens when you've got a site that needs 'special attention', like extra characters or a shorter password. I wouldn't want to tell SuperGenPass to have 6 char passwords for ALL of my sites, but how would it know that I need that for one particular site?

I personally have never needed to have a special case password, except for 1 site which I think had a 6 or 8 char limit.

So here is what you can do:

If you need a special char: Run SuperGenPass, then add one or more special chars (&,$,%,@,etc.) to the end, or beginning, something easy for you to remember in those special cases.

The same goes for cases where the password might have the requirement to use multiple numbers, as SuperGenPass I *think* usually generates password with only 1 numeric char (but always at least 1). You can add an additional number to the generated password.

When a site requires a shorter password there are a couple of options. SuperGenPass has an additional options screen that can be brought up by clicking on the "+", and you can change the length on this one site to 6 (you would have to do this every time you use SuperGenPass on this site).

Also, if the site HTML is setup correctly with a maxlength attribute, the generated password should automatically truncate to 6 chars, so SuperGenPass should work out of the gate. Otherwise, run SuperGenPass as normal, then manually truncate to 6 chars.

In the case of rolling passwords, run SuperGenPass, then add a rolling number to the end of the generated password, maybe the current month number, or quarter number, depending on the frequency that you need to rotate your password.

An alternative would be to add the rolling number to your master password before running SuperGenPass, this would generate a very unique end password that would still be 10 chars (rather then appending numbers causing a longer password).

Also, in all these cases, you could replace the end (or beginning) chars of the generated passwords with your special case characters (numbers, extended chars, etc.) instead of appended them so you don't push your password over any length limits that might be in place.

Hope these tips prove useful.

Ah, good points. I'll remember these tips when/if I come across problems.

OT: It would be nice if your blog's "new comment" notification email contained a link to the relevant entry.