I use a password generator to make me (in the case of PayPal) a string 12 random characters (like @Ny1w6Qkx=XR or lyZCbis*_eQj ). Paypal accepts it (sends me an e-mail saying my password has been changed) but still puts me in the loop "Suspicious activity on your account, please change your password". After 4-5 trials, I changed it for something simple, more "human" (like Pipo123! or Life#4Bad), and it lets me out of the loop and able to access my acount.
I know my method forces me to always use the same computer, logging into my password keeper program, doing a Copy/Paste, but for the web sites touching my money, I want to feel secure.
The work-around is tedious: Change my password every time I use Paypal. LOL Stupid, no?
