Tigerlein wrote:
Dont use like abc123 id and pw 321bca
Example use pass like hksow0492k and try keep ur email hidden just like ur pw.
Hidden emails can be brute forced. The best possible security in a system like this is to both use a random password
and register a junk email which you only use once whose address is a password itself (but not the same as your account password of course).
Something like
hksow0492k@gmail.com
In addition, if you are registering a new account you could make your secret answer a random password and your username a random password as well. If you wanted to be even more secure you could change your "password" email account and account password every week. And no matter what, never use the same password twice.
However, if you get keylogged then the best password won't save you. The only way to beat a keylogger is to fool whoever's writing down what it tells them. You could do that by using characters that are identical in sight such as ALT+255 which would be confused for a space but since SRO's passwords are severely limited you are pretty much screwed once you get keylogged.