Good point. What would you use as a suffix then?
I'm a bit paranoid though - most compromises aren't targeted and if a hacker gets a list of 20,000 hashes to crack they aren't going to inspect them individually.
2. Write "paypal" as you would in a querty keyboard
The result is both easy to remember and very hard to guess ;)