I doubt whether anyone who regularly posts on CP would admit to using their system.It would make _a_bit_ more sense if a person appended a fixed randomized string (of their OWN construction, one that nobody else knows...) to their usual password, perhaps AFTER ALSO customizing that password using the name of the website too. However, it would certainly be questionable to advertise this randomized string on a keyboard. Perhaps an array of characters, which only the user knew what portion to employ. (Right/left, Up/down, diagonal, etc.)Depends on the threat model, of course. Jim Bell
From: Shawn K. Quinn