[codeful]

Second this. Domain should generate chiper for a password. You get unique password for every website and you dont have to remember it

[bdhess]

If I’m understanding your suggestion correctly, it contains an attack vector where Provider B can obtain your password for Provider A by getting you to sign up for a new account and presenting the same “cipher” as Provider A.