How to Create a Strong Password You Can Actually Remember
Most of us were taught to make passwords complicated: a capital letter, a number, a symbol, and something nobody could guess. The result is a password that is hard for you to remember and, surprisingly, not that hard for a computer to crack. There’s a better way, and it’s easier on your memory.
What Makes a Password Weak
It’s short. The shorter the password, the faster it can be guessed.
It’s a common word or pattern, like “Password1!” or “Summer2024.” Tricks like swapping an “a” for an “@” are well known to the people trying to break in.
It uses personal details, like a pet’s name, a birthday or a favorite team, which are easy to find out.
You use it everywhere. If one company has a data leak, the same password can open every other account.
The Passphrase Trick
Instead of a short, complicated password, use a passphrase: four or more random words strung together. For example:
orange-bicycle-lantern-pasture
That’s easy to picture and easy to remember, and it’s much harder to guess than a short, complicated password. (Make up your own, and don’t use this exact one.)
A few simple rules:
Aim for at least 12 characters, and 15 or more is better. Length matters more than fancy symbols.
Pick words that don’t belong together, so nobody can guess them. Avoid famous quotes, song lyrics and lines from your favorite movie.
Leave out names, birthdays and addresses.
Use a Different Password for Every Important Account
This is the habit that makes the biggest difference. Your email and your bank especially should each have their own password, since a stolen email password can be used to reset the passwords on your other accounts.
Where To Keep Your Passwords
Nobody can remember dozens of different passphrases, and you don’t have to. Two safe options:
A password manager. Your phone has a built-in one: Passwords on iPhone, or Google Password Manager on Android and in Chrome. When you create a new account, your phone can suggest a strong password and save it for you.
A notebook kept at home. For many people, a paper notebook stored somewhere private is a perfectly good choice. It’s much safer than using one password everywhere. Just don’t label it “Passwords” and leave it on your desk, and don’t take it with you when you go out.
Do You Have To Change Passwords All the Time?
Not anymore. You don’t need to change a strong password every few months. Change it when:
A company tells you it had a data breach
You shared the password with someone
You notice anything suspicious on the account
You used the same password on more than one site
Changing a Password Safely
Go to the company’s official website or app yourself, never through a link in an email or text. Sign in, find Settings, Account or Security, and look for Change Password.
Add a Second Layer
A strong password plus two-step verification is a very strong combination. If you haven’t turned it on for your email yet, it’s worth doing next.
If you’d like help updating your passwords one at a time, a Kendera Global session can sit beside you and walk through it step by step.
