There's nothing really wrong with that as long as it's not predictable in some way. For example, if you knew that all my passwords were song lyrics in lowercase then you could attack my passwords using list of all the world's song lyrics (which would be much smaller than all random lowercase strings of length X).
If you come up with something you can remember that's long and unlikely someone else can guess the search space for then you'll be ok.
In a sense. But it's a principle of cryptography that you assume the attacker knows all your schemes / algorithms, and only the random bits are secret.
Comments
There's nothing really wrong with that as long as it's not predictable in some way. For example, if you knew that all my passwords were song lyrics in lowercase then you could attack my passwords using list of all the world's song lyrics (which would be much smaller than all random lowercase strings of length X).
If you come up with something you can remember that's long and unlikely someone else can guess the search space for then you'll be ok.
If I knew your passwords were all song lyrics, that's already a failure of security.
In a sense. But it's a principle of cryptography that you assume the attacker knows all your schemes / algorithms, and only the random bits are secret.
Your scheme can be a few more random bits, selecting from a finite number of "schemes".
Yes.