How to Create a Strong Password You’ll Remember
Most password advice focuses on complexity — special characters, numbers, capital letters — and ends up producing passwords that are both hard to crack and hard to remember, which pushes people toward reuse or sticky notes. There's a better way.
Why Length Beats Complexity
A long password built from random, unrelated words is dramatically harder to crack than a short, complex-looking one. "Tr33-Lantern-Kayak-42" is both easier to recall and mathematically stronger than "Tr0ub4dor&3", because length increases the possible combinations exponentially.
The Four-Word Method
- Pick four random, unrelated words (not a phrase you'd say naturally).
- String them together with a separator: hyphens, numbers, or symbols.
- Add a number or symbol somewhere unpredictable, not just at the end.
- Never reuse this combination on another site.
Example structure: Word-Word7Word-Word. The randomness of the word choice — not obscure symbols — is what makes it strong.
What to Avoid
- Personal details: birthdays, pet names, addresses — all discoverable on social media.
- Predictable substitutions like "@" for "a" or "0" for "o" — cracking tools already account for these.
- Reusing any password across multiple accounts, even "unimportant" ones.
Consider a Password Manager
If remembering even one strong passphrase per site feels like a lot, a reputable password manager can generate and store unique passwords for every account, so you only need to remember one master passphrase.
Pair It With 2FA
Even the strongest password benefits from a second layer. See our guide on two-factor authentication for how to add one in a couple of minutes.
Key Takeaways
- Length matters more than symbol complexity.
- Random, unrelated words are both memorable and hard to guess.
- Never reuse a password across sites, and consider a password manager.