The best password-remembering tip you’ll ever encounter

password.jpg

I’ll admit it. I’ve used the same password for many of my online accounts, which is terribly dangerous in today’s online-driven society. I changed this unsafe practice by coming up with a very unique system and in this article I’ll show you how to create unique and easy-to-remember passwords for all your online needs.

Imagine for a second having the same password for all your accounts, and somehow (either using social engineering or other tactics, such as a key logger) someone gets a hold of it and has locked you out of everything. Your Gmail, your online banking accounts, your goDaddy account and your domains, etc. Now imagine trying to regain possession of all of these accounts. Surely, a nightmare.

In an ideal world, we would have different convoluted (numbers, lower-uppercase, symbols) passwords for every single one of our accounts. Now, at least for me, it would be impossible to remember all of these given the numerous online accounts I’ve got all over the internet. Sure, you can use a program that automatically stores and fills in unique passwords for you, such as Roboform, but just imagine how horrible it would be if, one; your computer caught on fire or got stolen, all your passwords are all gone! Two: if someone got discovered Roboform’s master password. Either way, you’re screwed.

Now imagine a system where you would have easy to remember AND unique passwords for every single account. I’ve come up with the perfect solution. I’ll give you an example of how to achieve this, but remember, just create your own unique way. Just bear with me.

First of all, think of 2 memorable short words and a number. You can use 2 of your current passwords, just to keep things simple, and a number.

  • first word: dog
  • second word: red
  • a number (someone’s birth year, reversed): 37

We’ve got dogred37. Remember, play with upper-lower case combinations.

Now we’ve got doGreD38.

Lets take this combination and make it the base of our unique passwords, and this is how:

For your Hotmail account. Grab the first letter of hotmail, h and the last letter, l. Now combine it with your master password, reversed, and we get: LdoGred37h

  • For Gmail: LdoGred37G
  • For eBay: YdoGred37e
  • For Amazon: NdoGreD37a

Now there you have it. Unique and easy to remember passwords. You’ll never have to click the “forgot your password” link and wait for an email in return EVER AGAIN! Even worse, you won’t be tempted to write down your password on that sticky note on your monitor.

Create your own system. Be creative, but not too creative, where you won’t remember your own combination. Keep it simple.

Please share (without revealing, obviously) how you create and remember passwords in the comments.

[photocredit]

Related Posts




60 Comments

  1. Posted April 3, 2008 at 8:34 pm | Permalink

    That’s a great idea! I have so many passwords to so many different sites, it’s not a life-savor, but its pretty close ;)

    Thanks a bunch!

  2. No
    Posted April 15, 2008 at 4:07 pm | Permalink

    My old car registration numbers.

    For example ica317xg432rsa those are two reg’s together. Easy to remember, impossible to guess.

  3. Chuck
    Posted April 15, 2008 at 4:10 pm | Permalink

    A clever trick indeed! I have a fun way myself though, and it even caters to those who feel the need to write their passwords down. I like to create a sort of scrambling code for any password I feel I need to write down (i.e. switch the first and last letters, reverse lowercase to uppercase, or even go up one letter in the alphabet) This way, the only ‘password’ you ever need, is how you decide to scramble your written passwords. Its the same concept I believe, just a different take.

  4. Posted April 15, 2008 at 4:33 pm | Permalink

    http://supergenpass.com/

    That’s how I remember my passwords. :)

  5. Peter
    Posted April 15, 2008 at 5:02 pm | Permalink

    Try this format, if your name is bill smith and you were born on june 5 1954, your password would be smib0605_ _ (then choose 2 letters or numbers or a letter and number of your choice, if your system requires you to change it every some many days, this works well.

  6. David
    Posted April 15, 2008 at 7:31 pm | Permalink

    I like the idea of pass-phrases instead of passwords. For instance a work password could be “Ih82B@wrk2Day” = I hate to be at work today.
    Banking: “Iw>$1bB440y/o” = I want more than 1 billion dollars before I’m 40 years old.

    Obviously these are overly complicated examples, but the concept makes passwords extremely easy to remember and difficult to guess.

  7. Anon
    Posted April 15, 2008 at 7:57 pm | Permalink

    My password is hunter2

  8. Anonymouse
    Posted April 15, 2008 at 9:30 pm | Permalink

    I create the most obtuse, maddening passwords I can, things like ‘3M@iLPasSW0Rd*473′ - so that they’re sort of memorable, to me at least. Then I store them on a blind gmail account created with no personal info whatsoever - just in case I forget them and need to doublecheck. In the gmail account it will say ‘Bank Password: gIMM3m0NEy_1986′. But since the account contains no specific bank name and no real personal data, anyone who gets into that account would have no idea what to do with the info… only me. The trick is, if I need to access this gmail account to retreive a password, it has to be done reasonably, with no browser memory of the event.

  9. Posted April 16, 2008 at 5:15 am | Permalink

    The problem with these kinds of passwords is they’re still susceptible to dictionary attacks.

    We aren’t very good at remembering good passwords, so we should write them down.

    http://www.schneier.com/blog/archives/2005/06/write_down_your.html

  10. mrsleep
    Posted April 16, 2008 at 2:19 pm | Permalink

    Yeah, that was a great idea, till you put in on the internet you moron.
    Now everyone knows it.
    Smooth.

  11. Raphael
    Posted April 16, 2008 at 4:34 pm | Permalink

    :D
    Comment of the year! Comment of the year!

  12. Posted April 16, 2008 at 4:46 pm | Permalink

    That to hard… I just use 12345… on anything but my luggage.

  13. Tony
    Posted April 16, 2008 at 4:56 pm | Permalink

    I use complete sentences to make my passwords because for work I require very them to be extremely strong. For example, if you worked at the zoo, and there were 10 monkeys(Or even 100, remembering incorrect facts works well too)..

    “I saw 10 strange Monkeys fling poo at 2 others”

    Which gives us : Is10sMfp@2o

    Very strong, and very easy to remember.

  14. Posted April 16, 2008 at 5:00 pm | Permalink

    That’s a nice idea but if someone knows your method it’s still quite easy to break… although I guess they’d have to guess three of your passwords (two words & a number), plus the order.

    A good way of remember a password is to generate a random one using uppercase, lowercase and numbers, write it down, and then change your primary email account to that password. When it comes to typing the password in, don’t do it one character at a time, try to memorize the whole thing long enough to type it, and then memorize everything you forgot, and so on… and you should know it by heart within a couple of days, then burn the paper.

    Anon - luckily I only saw ******* when you typed that, some clever software going on here.

  15. Michael
    Posted April 16, 2008 at 5:24 pm | Permalink

    I use actual phrases. i.e.
    “This is a fine password.” is a fine password.

  16. vaago
    Posted April 16, 2008 at 6:47 pm | Permalink

    I was seduced by AIRoboform. Changing pass-phrases every ninety days became overwhelming. Managing 60 different passwords has become a non-issue; well worth the few dollars spent.

  17. Anon
    Posted April 16, 2008 at 6:54 pm | Permalink

    All I see is *******

  18. Sam
    Posted April 16, 2008 at 7:07 pm | Permalink

    His point isn’t that you should construct passwords so that they’re not easy to guess or forget…but that its unsafe to have the same, identical password on different websites. I can’t believe how 5 of the 7 of you who commented completely missed (or ignored) the point of his post :-\

  19. Posted April 16, 2008 at 7:07 pm | Permalink

    My password is Anon.

  20. Posted April 16, 2008 at 7:46 pm | Permalink

    What happens when my password for one specific account is compromised? Example, someone gets my Gmail password: LdoGred37G. Now, do I change the whole system? Just curious.

  21. Murali
    Posted April 16, 2008 at 8:11 pm | Permalink

    Wow.. that was pretty much to close what i do. I really got tired of these and had a similar approach.

    I keep a random phrase and pad it with ’site’ first or second or third character. ( which i usually rotate once a month or 2 )

    say if the random phrase is ‘pete123′ then for yahoo, i keep something like pete123+o

    Also be careful when you pick this logic & phrase. Few websites force you to have the password confirm to few standards.

    thanks for sharing though
    murali

  22. dkaz
    Posted April 16, 2008 at 8:26 pm | Permalink

    What I love about your system is how easy it is to guess the Gmail password if I somehow get a hold of your eBay password.

    LdoGred37G -> YdoGred37E

    Would your PayPal password be LdoGred37P, by any chance?

    Good stuff…I hope you’re a security chief somewhere.

  23. Posted April 16, 2008 at 10:00 pm | Permalink

    What would be even better is to set no maximum length on passwords like so many services do. On the ones that don’t, I’ve used passwords that span 100 characters, and sometimes I’ll tone it down and use the first 60 digits of Pi or my favorite super password of 34 digits with upper/lowercase, numbers, and symbols.

    I’m too smart to hand out my super passwords to something like social engineering, and keyloggers aren’t exactly a problem for me as I run Linux (and if they were I don’t have an smtp sender installed).

  24. Bonder
    Posted April 16, 2008 at 10:25 pm | Permalink

    I listen to some obscure music. I generate my passwords by taking the first letter from each word in a line of an obscure song. I choose which letters to capitalize based on the context of the song. If there are any numbers in the line, I use the number rather than the first letter (like 7 instead of s). If there are no numbers, I replace letters with numbers like 7 instead of T, etc. And that generates a password that is easy to remember, provided you can remember the lyrics, but looks like gibberish and difficult to guess.

    (not obscure) Example: from ‘twinkle twinkle little star’
    Line: like a diamond in the sky
    Password: 1aDit5

  25. k23
    Posted April 16, 2008 at 10:30 pm | Permalink

    one of the best ways to remember complicated passwords is to write them down — and leave out one or two letters and remember where to put them.

    example:

    for the pc at work, the (totally made up) password is

    XpC12trG

    you can even post a sticky note to the screen like this…

    XpCtrG

    …and just tell everybody who is supposed to use the pc: put a 12 (an X/a dollar sign/…) in the middle (at the beginning/at the end/after the first character)

    impossible to guess, easy to remember.

  26. KB
    Posted April 17, 2008 at 1:20 am | Permalink

    I agree with kdaz (22), your a plonker. Whta happened to 8 character RANDOM letters cap’s with numbers and just learning a few differnt passwords. Jach (23) your a knob-end also.

  27. Posted April 17, 2008 at 2:06 am | Permalink

    @Tyler Gresham: Thanks. Glad to help

    @Chuck: Yeah. Thats the idea

    @brian: well…what if your main passwords gets compromised?

    @Peter: Sure another variant. But you’ve got the idea

    @Samuel: Dictionary attacks? Don’t think so. Perhaps brute force. Plus, this article was about REMEMBERING passwords

    @mrsleep: Well, like I said, create your own method…don’t use mine, moron!

    @Tony: Good idea

    @James: How would someone know my precise method, unless they figure out the pattern after knowing perhaps 3 of my passwords. Again, this article is supposed to help your remember different, convoluted passwords, not memorize a bunch of meaningless characters.

    @Sam: Looks like you’ve THOROUGHLY read the article. Thanks

    @Kmull: Like I said, don’t use this exact system, create your own, that way, if your password gets compromised, no one knows your method

    @dkaz: I don’t use this exact system, but a variant, this is just a suggestion, so if someone got a hold of one of my passwords, they wouldn’t know my method

    @Bonder. Good method.

    @k23. I don’ like writting my passwords down, but if I were to do so, I’d probably use this method. Thanks.

  28. Posted April 17, 2008 at 9:40 am | Permalink

    How To Choose A Password You Will Not Forget - Predictable Passwords Simplify A Hacker’s Task

    Reprint of a letter published in the International Herald Tribune six years ago, and it still hold true. I have added a bit, but the idea stays the same.

    Hackers take great joy in bypassing passwords, I’ve done it myself.

    - Your job is to make passwords unpredictable.

    It is wrong to tell people that passwords can be broken without explaining the proper way to choose one that will be more difficult to break.

    - Given enough time every password can be broken.

    You should choose a password that is seven or more characters long. Don’t use a word that is found in a dictionary - a program can be written to use every word in a dictionary.

    Once you use a password that you consider good, don’t use a sequence of that password (Tolkien1, Tolkien2, Tolkien3)

    Try making up an acronym - JDwfLTismf (”Jack Daniels whiskey from Lynchburg, Tennessee is my favorite”). Unless you know me well enough to know that I like Jack there would be no reason to consider that phrase. If you did know my like for Jack there is still no reason to consider this as a possible password.

    Try and misspell a word using one or more special characters in the center of the word, like Disné#Land.

    Since many passwords are case sensitive, use upper and lower case.

    When it comes time to change passwords, I take the local newspaper and choose a word. The word for today is Doonesbury, which I modify to be D00n3sb_r. Or take the word lightbulb and spell it 1igh+b_1B. It is actually very simple, once you get the hang of it.

    Take the word “automated” and on a US keyboard type one character to the right “siyp,syrf” and doing this means that you can use your family name if you want to.

    For sites that do not have any money related information I use one password. I take an unnatural word combination, like an adverb and a noun (an adverb, broadly defined, is a word which modifies any word other than a nouns), combine them the make a word that does not exist in the dictionary. SlowlyTruck is a combined word that does not appear when searched on the internet. Slightly change the spelling and you really have a wonderful password - how about Sl0w1yTruck

    I only use one password for sites like blogs. For sites that have money related things I use the ideas referenced above, but since I have a good memory I really screw the text up. I have also taken a text file and just typed a dozen or so characters, and whatever came out was a password.

    Change your password at work every two months and personal passwords as often as you feel necessary.

    Change your password now. Don’t wait for the prompt.

  29. joe
    Posted April 17, 2008 at 1:53 pm | Permalink

    I just use a mneumonic.
    Take an easy to remember phrase like-
    ‘This little piggy went to market this little piggy went home’becomes ‘tlpwtmtlpwh’then by interjecting even a single number you can get something like ‘tlpwtm5tlpwh’for an even highr strength-impervious to dictionary or brute force attacks. If you are even more paranoid,add in some upper and lower caseand a symbol that makes sense to you and voila! All you really have to remember is ‘This little piggy went to market this little piggy went home’

  30. Dunlap
    Posted April 17, 2008 at 5:38 pm | Permalink

    For most of my passwords now I’ve switched to a format that incorporates the site’s name into it. Depending on how secure I want it to be, I might throw a number or two in there. For example, ‘myspace22′ (which is not my actual password but close).

    It’s not super secure or anything, but it is a step above using the same one for everything, and incredibly easy to remember. When I get somewhere and can’t remember it, I just look at the site name.

  31. Steve K
    Posted April 17, 2008 at 9:07 pm | Permalink

    As an old crypto curmudgeon, this is a subject near and dear to my heart…

    I never bother with mixed upper and lower case, or symbols, numbers, etc, when I am allowed to use a long password. Why? Adding extra symbols multiplies the number of possible combinations, while adding length raises the number exponentially. Add the fact that it is easier to remember a password without random caps etc., and it’s a logical choice.

    I like most of the simpler methods mentioned here. One of the better ones is to use a joke or pun that you have always thought was funny, as a source for (for instance) the first three letters of every word in some memorable phrase it contains. Hard to forget, easy to type, and dictionary resistant.

  32. dwindle
    Posted April 17, 2008 at 11:40 pm | Permalink

    I use key patterns, like “45rtfgvb” (look at it). They are not only easy to remember, but easy to type. “qpwoeiruty” is another favorite.

  33. Posted April 18, 2008 at 8:40 am | Permalink

    “45rtfgvb” & “qpwoeiruty” are bad.

    anyone can look over your shoulder and figure that out.

    Use translate dot google dot com and stick a phrase in a different language.

    Ihatecats,buttheycookwell would be good if you translated it into spanish

  34. Anonymous Coward
    Posted April 18, 2008 at 3:35 pm | Permalink

    This is all great, except when some site makes you change your password periodically…

  35. Tech Suppport
    Posted April 18, 2008 at 4:37 pm | Permalink

    good ideas all round but still the human brain can only hold so much info
    so at any given time, it forgets little used ones, like a bank account you only log into once a month

    at were i work we have about 34 ids and passwords to remember. and use every day.

    its not hard for some but others it is

    i have one suggestion
    no more passwords ever… fingerprint scanner, got one at home and i love it

  36. elle
    Posted April 18, 2008 at 7:52 pm | Permalink

    I create a small, simple language, and make my passwords from words and phrases from its vocabulary and grammar, with the requisite numbers and symbols mixed in.

    If it’s easy enough to remember the words and rules, you don’t need to write it down, so long as you stay in practice using it. Just remember an easy phrase - “I love Joe” - and translate it mentally.

  37. SapphireMind
    Posted April 19, 2008 at 1:56 am | Permalink

    I personally use a generic password for any place that I don’t really care if it is hacked or not. “Ohmigod, you have hacked my dollhouse builder’s forum pword. what ever will I do?” This covers 75+% of the passwords I need. If I need something to be secure, I either take words from a non-romance language (basque, irish, or german typically) and use that to make a phrase that I can remember. ie: I’m having a bad day, so I decide to make my pword ‘today sucks’. That’s Heute saugt via google translation. HeuteSaught&G4 becomes the password (&G because it’s german, 4 because it’s April.)

    I also use the “forgot password” questions creatively. I love the ones that let me type in my own question and answer. I use nonsensical answers that make sense to me, or purposely misspell things. like: Q: Are you sleeping brother? A: Owl (dora the explorer reference that my kids like) Or if they supply the question, Q: Your favorite drink A: moss eyeslee (mos eisley for you star wars fans. drink=bar=misspell)

    Sorry to disappoint, none of the examples used are anywhere close to any of my real pwords/reminders, but it makes a good system for remembering things, in my little brain, that is.

  38. A Sceptic
    Posted April 19, 2008 at 6:35 pm | Permalink

    Perfect Passwords???

    www dot grc dot com virgule passwords

  39. Cowardly Anonymous
    Posted April 20, 2008 at 1:29 am | Permalink

    I just use a word, say, Computer, and write whichever letter(s) stand out in the word (to me, anyway) using the numpad instead.

    So ‘Computer’ becomes 9874123om147854u789852er

    (Just try typing that if you don’t get what I mean)

    Generally I add the first letter of the site name to the beginning too, although it’s probably secure enough anyway.

  40. iamwudu
    Posted April 20, 2008 at 3:16 pm | Permalink

    @Tech Suppport (35)

    You have to consider that fingerprints are not as save as (good) passwords! That’s because passwords cannot be stolen (if you didn’t write them down of course), whereas a fingerprint can. Here in Germany we recently had this debate. Our government wants to introduce new passports with biometrics such as fingerprints. The “Chaos Computer Club” (one of the biggest hacker organisations here) then stole the fingerprint of our Secretary of the Interior (from a glass he drank from at a panel discussion) and published it in their magazine as plastic foils. You simply have to stick it over your finger and you have his identity. The CCC also provides instructions how to create such foils (which is ridiculously easy) on their website.
    So at least for sensitive data are fingerprints uneligible.

    http://blog.wired.com/27bstroke6/2008/03/hackers-publish.html

    TV report (in english):
    http://de.youtube.com/watch?v=mVu5ofv92e0

  41. scholi
    Posted April 22, 2008 at 8:18 am | Permalink

    There is a much better solution and a more secure one. It’s: PasswordMaker, it’s an extention for firefox. ;)

  42. Luc
    Posted April 24, 2008 at 1:26 pm | Permalink

    I just use a few passwords (about 5) for everything. upper-case, lower-case, numbers, and three also got symbols.
    (all random chosen characters)
    Read them a few times, use them a couple of times and you don’t forget them anymore!

    And when someone cracks one of them, I always got a backup (my site is on different accounts with 2 different passwords, my contact list on msn is also saved so I can always send an e-mail to everyone that I got an new hotmail adres, etc.)

  43. Posted April 24, 2008 at 5:37 pm | Permalink

    Why not just use 1password?

  44. ben
    Posted April 26, 2008 at 6:58 pm | Permalink

    Sometimes I just bang my head on my keyboard to put in a password.

    I always have a hard time confirming it, though. . .

  45. Anon Y. Mous
    Posted April 26, 2008 at 9:00 pm | Permalink

    Some of the methods mentioned by other folks are better than others. The requirements, to me, are generally the following:

    1) Easy for self to remember
    2) Hard for others to guess
    3) Different enough for each site that knowing the passwd for one won’t yield the passwd for the others
    4) Hard to tell by watching someone type the passwd
    5) Easy to change/update
    6) Portable (not tied to one computer)

    A near-dictionary word is needed in many cases due to #1. So one must somehow modify it–and do it in a way that will not violate #1. Some methods are: use foreign characters, ‘l33t’ typing, etc.

    I’m gonna say something unpopular: given #4, uppercase letters, digits, and symbols are not all that ideal, because they slow down the typing. A long, all-lowercase passwd would be just as difficult to brute-force as a shorter one with one of those features.

    For example, using the Cyrillic alphabet, one can map the word ’sarah’ to ‘capa’.
    Using Pinyin is generally a bad idea as it has limited combinations.

    I don’t agree with the practice of adding the first and last letter of a site’s domain name to the passwd–or a similar variant, due to #3.

    If I captured your passwd for yahoo and saw that it is ‘oblahblahy’. I would be willing to guess that your passwd for hotmail is ‘lblahblahh’.

    A variant of this method might work better: appending or prepending the passwd with one letter for the domain name, AND one leter for the sequence count which is incremented when the passwd is updated (see #5.) e.g. ‘blahblahya’, ‘blahblahyb’… for yahoo. The suffix ‘yb’ is slightly less of a giveaway than the first-and-last-letter method. To make it better, one could ‘increment’ that letter by one. i.e. use ‘z’ instead of ‘y’ for yahoo, and use ‘i’ instead of ‘h’ for hotmail.

    I dislike passwd generators (even SuperGenPass) because of #6.

    I agree with using ‘generic’ passwds for sites that don’t matter.

    I have even begun using passwds that I will never be able to remember–and store them in an encrypted file–for sites that I seldom use. It’s not the most ideal way, I must admit.

    I’m not telling anyone what my first pet’s name is or who my favorite high school teacher is. That’s why I don’t take those ‘forgot-passwd’ questions seriously.

    We’ve arrived at an age when the number of passwds that we use daily has exceeded our ability to manage them–for the average person. The good news is, we now have great encryption tools that were not available just 10 years ago. So I DO write down my passwds–and encrypt them.

    Here’s a thought on writing down passwds:
    write them in such a format as to defeat those passwd-search/grepping programs.

    For example, this is bad:
    ———————–
    site: yahoo.com
    login: joeblow
    passwd: blabblah

    site: hotmail.com
    login: jackblow
    passwd: blowblow
    ———————–

    Instead, do this:
    ———————–
    hotmail.com
    joeblow
    blahblah

    hotmail.com
    jackblow
    blowblow
    ————————

    That’s just my $0.02.

  46. anom
    Posted April 28, 2008 at 12:12 pm | Permalink

    I wouldn’t say it is unique or you created that idea, but thanks for sharing.

    This method works well, i have been using something similar for years now.

    I acutally started with a very long random password from a pass gen, memorized it and then used this pattern, very hard to guess

  47. Wayne
    Posted April 28, 2008 at 7:10 pm | Permalink

    If somebody finds out two of your passwords and they are similar then they know how to begin attacking the rest. Very insecure.

    Instead, use a program like PasswordSafe (http://passwordsafe.sourceforge.net/) to create and store ridiculously difficult passphrases. And then be sure to put a very good passphrase on the safe. The safe will encrypt everything for you so there’s no risk of it falling into the wrong hands, and good backup habits will protect you if your computer burns. (You do back up every day, right? If not, passwords are the least of your worries. Get a program like Acronis True Image to effortlessly backup everything every day.)

    As for actually selecting passwords, use at least one character that isn’t on the keyboard, making it nearly dictionary attack-proof. For instance, you can make a cent sign by holding down ALT and typing 0162 on your keypad. With this, you can have an ultrasecure password like “IH3ardHi$2¢&D1dn’t¢ar3″. (”I heard his two cents and didn’t care”.) You type a password like that about five times and you’ll never forget it. Make that the passphrase to your Password Safe, and use the features in Password Safe to make it soyou never have to type (or remember) any of your other passwords.

    Wayne

  48. Wayne
    Posted April 28, 2008 at 7:14 pm | Permalink

    Followup to my previous post: Obviously, when I said “Make that the passphrase to your Password Safe”, I meant make the passphrase to your safe something incredibly difficult like that. It would be a very bad idea to actually use “IH3ardHi$2¢&D1dn’t¢ar3″ since that one has now been published. Never use a password you saw somewhere and were impressed by - if it is impressive enough, it’ll just be added to the top of a dictionary list.

  49. Luis
    Posted April 30, 2008 at 8:14 am | Permalink

    As a network security expert my advise is to: Memorize them all. I have a remarkable memory and remember all the different passwords. OF course you will have a key password and different variations to the same word as suggested by the author.

    Now, think on this: how many phone numbers can you remember? eh? compare with the amount of passwords you normally handle and you will see how easy is to remember!!

    Come on, don’t be lazzy and develop your brain!!

  50. Meena
    Posted May 1, 2008 at 6:07 am | Permalink

    I use the birthdates and uppercase / lower case characters of the first names of family members. From one birthday to the next the order is rotated.

  51. Leon
    Posted May 1, 2008 at 12:27 pm | Permalink

    It’s pretty simple really, just use the same passwords for the stuff you don’t really care about (last.fm, forum accounts, facebook (I don’t use it that often, so I don’t care)) and when you have something important, like paypal, ebay or gmail, just use a different password. I have different passwords for each of these, but I remember them because I use them daily.

  52. Posted May 4, 2008 at 9:52 am | Permalink

    Nice Idea! I am good with numbers. So I take the first letter of an online service, link it to a person i know whos first name begins with the same letter. then i put that persons telephone number in it. I finish the password with the first letter of the persons last name. Sometimes the first letters of the middle and and the last name. Sometimes i put the middle name between the area code and the number ….

  53. TM
    Posted May 8, 2008 at 1:53 pm | Permalink

    I just use a few simple passwords for stuff that doesn’t matter (forum logins, etc).

    For important stuff (banking for example), I just generate really long crazy passwords and commit them to memory.

    In the meantime, you can use KeePass to store them in an encrypted database so you aren’t screwed if you forget them.

  54. Posted May 10, 2008 at 10:50 am | Permalink

    any good password scheme will have a special character…..

  55. Posted June 13, 2008 at 8:09 am | Permalink

    nice post, i surprised that my comment is 55th.

  56. Vernon
    Posted June 21, 2008 at 5:28 pm | Permalink

    Remember:

    1) Some websites only allow a maximum number of characters (usually 8)

    2) Some websites do not allow symbols of any type

  57. anonymous
    Posted June 22, 2008 at 3:33 am | Permalink

    Another idea is that whatever scheme you come up with, if then offset your fingers on the keyboard.

    That is, instead of putting your pointer fingers on F and J, put them on other keys, such as G and K, then type your password by touch.

    Even you, perhaps, never need to know what the actual password really is.

  58. bill
    Posted June 26, 2008 at 10:23 am | Permalink

    I have a system that may not sound simple, but it is simple for me and I have actually guessed my own passwords that I previously had forgotten, because they were based on my first impressions of things, with a trick borrowed from the Navajo code-talkers. It goes like this:

    I have very basic knowledge of a couple of foreign languages. Basically when I look at the name or the nature of a site which requires a password, I roughly translate that name into a word or 2 words that I know well in another language. If I don’t particularly care if the password is terribly strong, I then listen to the sound of the foreign words and decide what English word or pair of words I can substitute that sounds the most like them, and use that for my password.

    If I want a stronger password, I use the words I thought of in the foreign language, plus using a numbering system for the foreign alphabet I come up with a number to append, insert, or interlace into the password, depending upon how strong I feel it should be. Sometimes I use the “sounds-like” strategem together with numbers, or combine foreign-language syllables with English sound-alikes. If I do this, I’ll mentally tie the method I use to a particular unique and salient feature of the site in my memory, so that when I return, I will see it and remember. For example, for Ebay, using this method, I would zero in on a feature that stands out for me–the bidding/watching page. Then I would think, “bidding *sounds like* something, combined with watching a *foreign* film”. Repeat this verbally in my mind or aloud a few times, imagining a picture of those activities around the words “bidding/watching”, and then I won’t forget even if I come back months later that “oh, bidding/watching, I did the “sounds-like combined with foreign” method for the password.

    As for the password, supposing that Spanish were the foreign language, I would think Bay=Bahia. Since that might be too obvious, I think of the next word *I* think of after Bahia that no one else would think of–in this case, the most common word in the *other* of the 2 catchiest tunes in the movie that “Bahia” makes me think of, and that word is “Yaya”. The closest English sound-alike thing I could think of to “Bahia” would be someone saying “buy here” in an extraordinarily thick New Jersey accent, so the password could be YayaNJbuyhere or better yet YayaNJbaheah (since “buy here” coincidentally has a little obviously too much to with the site in question). I could then use a *number* based on Bahia, the word *not* in the password, to insert in there–2+1+5+9+1=18– and make it Y2a1y5a9N1J1b8aheah, if I really felt I wanted some extreme security here.

    So should I come back to the site months and months later, I just look at it, let those first-impression words pop up in my mind, remember how protective I feel toward that password, and manipulate the words accordingly.

    The key of course is knowing yourself well enough to choose what will most reliably pop up in your head, internally, especially stuff you normally wouldn’t say or discuss but stays prominent in your mind. That way all those impressions and connections too banal and/or silly to be uttered that often swirl around in our heads could be actually put to good use to really make those passwords ones that you will not forget (or that you could reconstruct even if you did forget) and no one else would guess or tease out with algorithms.

  59. Posted July 26, 2008 at 9:10 pm | Permalink

    Nice idea. I’ve always used 3 passwords:

    - A secure password (hard to guess) for all online banking/ebay/paypal/etc.

    - A less secure password for my ISP/email accounts/hosting/etc

    - A password for everything else

    I tend to to just use a word thats quick to type, with a number or 2 embedded and added to the word. eg: 1d0ggy77 (1 doggy 77).

    Its not as secure as your method, but it works well given that I often need to share passwords with my wife (so I need to minimise any chance of confusion)

  60. aaa
    Posted September 10, 2008 at 12:12 am | Permalink

    Nice ideea … helping hackers and crackers to find more easy our password

8 Trackbacks

  1. By JJMELO.com » I’m back to blogging on May 11, 2008 at 1:37 am

    [...] The best password-remembering tip you’ll ever encounter [...]

  2. By links for 2008-06-09 » Go Web Young Man on June 9, 2008 at 3:32 pm

    [...] JJMELO.com » The best password-remembering tip you’ll ever encounter One writer’s tip for creating easy to remember, hard-to-guess passwords. (tags: security passwords tutorials) SHARETHIS.addEntry({ title: “links for 2008-06-09″, url: “http://michaelwender.com/2008/06/09/links-for-2008-06-09/” }); This entry was written by Michael, posted on June 9, 2008 at 6:29 pm, filed under Links. Bookmark the permalink. Follow any comments here with the RSS feed for this post. Post a comment or leave a trackback: Trackback URL. « Petition to Bring Back Mayfield’s Caramel Coyote Ice Cream [...]

  3. By Password Creation Technique : Productivity501 on June 21, 2008 at 9:46 am

    [...] ran across a nice post on creating unique passwords today.  Also see our previous post on the [...]

  4. By A Sua Senha eh Segura? « Cheers To That!!! on June 21, 2008 at 4:22 pm

    [...] vai o link do site que explica tudo bem detalhado) e a minha explicacao bem [...]

  5. By links for 2008-06-23 : Ponto Media on June 23, 2008 at 12:31 pm

    [...] The best password-remembering tip you’ll ever encounter (tags: stuff) [...]

  6. [...] Como montar senhas diferentes e recordáveis 24 06 2008 Encontrado no JJMELO.com » [...]

  7. [...] sollte sichere Passwörter kreieren, die man im Notfall rekonstruieren kann. Der Blogger J. J. Melo schlägt dazu vor, zwei beliebige kurze Wörter und eine Zahl zu wählen, die Du Dir gut merken kannst. Er [...]

  8. [...] The best password-remembering tip you’ll ever encounter - Build a strong password, without ever forgetting it! [...]

Post a Comment

Your email is never published nor shared. Required fields are marked *

*
*