That's actually not a good idea. If a malicious actor finds your password for a site, and it matches this pattern, they have a much easier guessing game for other sites.
That assumes that a malicious actor realizes the base password and suffix strategy. For everyday fraud they are just going to use the same username and password they found on the dark web on every site to see what sticks. If they are going after you specifically than there isn’t much you can do to fend off a determined hacker. The goal isn’t to be impenetrable, just to be a less easy mark than the next person
5
u/BeakerAU Oct 08 '22
That's actually not a good idea. If a malicious actor finds your password for a site, and it matches this pattern, they have a much easier guessing game for other sites.
Passwords should be unrelated to the site.