as for password, I use password manager.

Problem with oauth that I can't make e-mail unique and I can't know where spam is coming from.

ex: user+dropbox@mydomain.com will be unique for that domain.