How to create strong passwords I can actually remember?

dayzsunny

I’ve always tried to keep my passwords reasonably strong but still something I could remember when I didn’t have access to a password manager. With all of the “reset your password immediately” warnings lately due to data breaches, that is becoming harder and harder for me. Does anyone have tips for creating passwords that are reasonably strong that can still be remembered?

Topic: Security
Answer this Question

Answers

3 total
jhotz
Vote Up (6)

There are two methods I use that might be of help to you. The first one is that I create a pattern on the keyboard. This is particularly effective for me, as a visual learner. For example, I might use “the mountain and the valley” - zse4rfvbnm. Look at your keyboard and follow the letters and you can see why I called it that. FYI, I don’t actually use that one, but just made it up to give a simple example. 

 

The second method, and one used by many people, is to pick a line from a song, movie, whatever and use the first letter of each word. Pick a letter or two that you can remember to replace with a number (example “L” = “1” or “B” = “8”).

jimlynch
Vote Up (4)

How To Create and Remember Strong Passwords
http://www.forbes.com/sites/larrymagid/2012/07/12/how-to-create-and-reme...

"One of the best ways to protect your online security is to have strong passwords that you change periodically. But that’s easier said than done. Coming up with hard-to-guess passwords is hard enough, but it’s even harder to have separate passwords for different sites and to remember new ones after you change them.

One way to create a password that’s hard to guess but easy to remember is to make up a phrase. You could type in the entire phrase (some sites let you use spaces, others don’t) or you can use the initials of each word in the phrase, for instance, “IgfLESi#85″ for “I graduated from Lincoln Elementary School in ’85″ with a # symbol to add more security. An even better one would be “Mn1bfihswE&S” for “My number 1 best friends in high school were Eric and Steve.” You get the idea–upper case numbers, letters, and symbols that are seemingly meaningless to everyone but you. Microsoft has an excellent primer on passwords and a password strength checker."

jellyfish25
Vote Up (3)

I use keepass (and yes, there is an android version) for my pw management. One tip I have: if a site requires a "security" question, generate the answer with keepass and store it in the notes section of that entry. Security questions are pretty stinking insecure.

Ask a question

Join Now or Sign In to ask a question.
A type of body scanner in wide use across U.S. airports through last year fails to spot well-concealed weapons including guns and knives, computer security researchers contend.
A modified version of Android uses a system of modularized plugins to help make sure the latest security tools make it into the hands of end users as quickly as possible.
The UPS Store said Wednesday that malicious software was found on the systems of 51 of its franchises in 24 U.S. states, although no fraud has been detected yet.
Start-up SentinelOne is offering security software for behavior-based malware detection intended to augment, not replace, the type of full anti-virus endpoint protection suites that typically also have signature-based defense, a firewall and other features.
A type of malware called Reveton, which falsely warns users they've broken the law and demands payment of a fine, has been upgraded with powerful password stealing functions, according to Avast.
An analysis by security researchers of 48,000 extensions for Google's Chrome browser uncovered many that are used for fraud and data theft, actions that are mostly undetectable to regular users.
University and vendor researchers are congregating in San Diego this week at USENIX Security '14 to share the latest findings in security and privacy, and here are 5 that jumped out to me as being particularly interesting.
Nearly all of Facebook's outbound notification emails are now encrypted while traveling the Internet, a collaborative feat that comes from the technology industry's push to thwart the NSA's spying programs.
Many former employees retain alarming levels of access to critical business applications after they've stopped working for a company, a survey for cloud services firm Intermedia has claimed.
Symantec will consolidate its cluttered Norton line of security software, folding nine products into one online service that can be used across desktop computers and mobile devices.
Join us:
Facebook

Twitter

Pinterest

Tumblr

LinkedIn

Google+

randomness