Hacker News Reader

Now we know

Now you know that there is some sort of salt. That isn't helpful to an attacker trying to cryptographically crack a password if they already have the password database.

This is a good idea that's never occurred to me. I guess you could also consider it like having one password for all your accounts, except salted with some random string from your password manager

Will it always be 8? Or will it vary?

Good idea, I would add a yubikey to that, for an additional step.