1Password should by default just always capitalize one word, and add “1” at the end of the memorable password. Since the words are separated by “-“ or “.”, you already hit the “at least one symbol” rule.
- keyloggers (safer to click instead of type instead -> on-screen keyboard then)
- but then it turned out Internet Explorer had a bug which allowed attackers to read the mouse click events' X/Y coordinates in other windows which then could be mapped to the on-screen keyboard digits if the layout is predictable
And it also makes my laptop's fan spin up for about 5 seconds on the page load or reload. No idea WTF they're doing - cryptomining?
https://www.ing.com.au/securebanking/
My password manager appears to type the access code successfully but you can't click on login until you click on the stupid keypad.