Thread by @Barnacules

I've been toying with a method for people to keep credentials memorable while keeping them completely unique on each & every site 👍

This method uses SHA256 encoding to generate username & password based on memorable secret & format, but input username & password is gibberish 😎

Just come up with a phrase you can easily remember like "i<3vaginas" then use URL itself as prefix to username & password.

User: gmail.com_barnacules
Pass: gmail.com_password

Then use encoded text as actual username & password for each site 👍

(Example. [e-mail])
user: gmail.com_someguy
pass: gmail.com_someguy_password
secret: i<3vaginas
siteuser: 9a4315f777adaa6899aa2c519641697025c74dbf9728005a
sitepass: 9a4315f777adaa6899aa2c519641697025c74dbf9728070155705752c76f566fa31c75a2
🤔

This way every single site has a gibberish super long username & password that can't be brute forced & you never store the secret anywhere since you can easily memorize it & only give it to the encoder when rebuilding the username or password 👍 #Security #Password #Privacy #Dev

This is a similar way to how I used to build credentials for sites that were unique and yet memorable since most sites just stored the hash and never the full password. But after dozens of full password leaks from various sites you really can't trust every site to keep a secret.

Now, ideally you would want to put this in a little app on your phone that uses the clipboard or a browser plugin to make it really quick to just type in the pseudo username and password & have it automatically encoded it to the right one for the site. But no more storing creds.