zlacker

>>mikece+(OP)
I don't use the qwerty layout, I use colemak. Likely this mitigates this for myself.

>>thedoo+2w
This is just security through obscurity. For real security, you need a cryptographically rolling keyboard layout.

>>bqmjjx+rw
Whereas for practical security, having some common substring in all your passwords that you don't type but insert through some global hotkey would be just fine as a mitigation against eavesdrop attacks.

Yes, that's also obscurity, but obscurity is actually good - it only got a (deservedly) bad reputation from when it gets used as a substitute (but I fail to see how using a nonstandard keyboard layout would even count as obscurity in the context of an audio attack, as the clear text reference would surely go through the same layout?)