The problem tends to be how many usernames and passwords people have. Many are used and people eventually "huddle" into sites they like. So if someone loves cooking sites, recipes. They may sign up for 100 sites over two years but actually only frequent a handful. Yet, uIDs' and Pwd's are all over the place at 400 sites over the past 4 years.

One cant remember "ASwerfs34wd" for this site, "adkahtndvmASD343" for that site and password managers are a pain and a keylogger or network capture hack malware is hard to defend against.

What we recommend people generally do is setup an email address at Yahoo or GMX or other free mail operations. Use that email as a base email address when signing to new sites. In as far as UserID's go, use memorable permutations. For example, this is WPTavern. Whats my favorite color? Blue. Whats my computer? A Gateway. Whats my favorite number? 54. My favorite animal, a dog. My passwords will always have permutations of these elements. The first three letters of the site will always be "lower/upper/lower case" and be at the start or the end of the password.

A password permutation might be "wPt54GatewaY" or "GatewaYBluewPt"

Use one set of permutations for new signup sites (ones I dont know if I'd hand out at) and make the criteria different. aka: My favorite video game of all time, favorite number, favorite coffee and favorite color.

If one decides to make it a frequent romp then move it to the main email address and change the password to the first form permutation.

One can refine it more, "54" will always precede or be after the "three letter site name" so at Amazon lets say, "aMa54BlueDog" or "54aMaDogBlue" or "DoGBluEaMa54"

Just a simply formula and odd's of getting beaned due to some hack be that on the PC or via a site exposing data via being hacked are very very neutralized.

We do recommend for eCommerce that an additional piece or two pieces be added such as the first 4 digits/numbers in a drivers license for example affixed to the front or back of the password.