I like that it is deterministic, and I was going to ask what if a single password was compromised, but it looks like there is a "counter" field for each site that overcomes this. Nicely done.