[gregmac]

Yep, I highly recommend LastPass as well. The password generation, sync, platform support, and browser extension features are great. It's fairly easy to setup exclusion filters for not remembering passwords, as well as controlling if matching works on the first level domain (*.domain.com) or exact host.. The former generally works well for most sites, but the latter is essential for my own domains (where I have multiple different services, accounts for testing, etc).

I've been using a catch all domain for at least 15 years. One thing I learned early is to use a subdomain, which avoids getting dictionary spam attacks.

For the last many years, I just forward it to a gmail account, where there is a corresponding filter to label it into an "accounts" group. I get essentially zero spam to this.

Also, I've had multiple times where it confused reps as well. It's kind of funny when it happens, but also sad that having "[e-mail] domain.com" makes them go "oh, did you used to work here or something?".

[tripzilch]

> For the last many years, I just forward it to a gmail account

How do you do this?