My brains alone. Over the years I've developed a pattern I can remember easily, and apply another pattern to it based on the site or app's name. It's a simple math formula that changes the entire password instead of just applying a suffix or prefix to an existing strong password.
Ironically, the only site this fails on is my banking site which has wish-it-was-2-factor authentication and a limit of 8 characters for the password. Stupid.
Ironically, the only site this fails on is my banking site which has wish-it-was-2-factor authentication and a limit of 8 characters for the password. Stupid.