How to Create Secure Passwords You Can Remember
"123456", "password", "qwerty". Year after year, these remain the most used passwords in the world. And every year, millions of accounts are compromised due to weak passwords. In this guide, we teach you how to create passwords that are secure and that you can remember.
What makes a password secure?
A secure password has these characteristics:
- Minimum length of 12 characters — Each additional character exponentially multiplies the time needed to crack it
- Mix of types — Uppercase, lowercase, numbers, and symbols
- Not predictable — No dictionary words, birth dates, or proper names
- Unique — Different for each service
The problem: we can't remember 100 unique passwords
The average person has between 70 and 100 online accounts. Memorizing a unique and complex password for each one is humanly impossible. That's why most people resort to:
- Reusing the same password (dangerous)
- Minimal variations: "Password1", "Password2" (predictable)
- Writing them down on paper (insecure and impractical)
Technique 1: Passphrases
Instead of a word, use a phrase. It's longer, more secure, and easier to remember:
| Weak password | Strong passphrase |
|---|---|
| cat123 | MyCatJumpsOver3Roofs! |
| london2024 | InLondonItRains&SnowsLittle |
| password | TheCoffee.At7.IsBest |
Passphrases are easy to remember because they tell a story, but hard to guess because they are long and unique.
Technique 2: The initials method
Think of a phrase that only you know and use the initials:
- Phrase: "My first car was a Seat Ibiza from 98"
- Password:
MfcwaSIf98!
Add a symbol and you already have 11 characters that are impossible to guess but easy to reconstruct mentally.
Technique 3: Random words with separators
Choose 4-5 random words and join them with a separator:
lightbulb-clock-waterfall-train
You can add a number and a symbol for more security:
Lightbulb-Clock-Waterfall-4Train!
The definitive solution: a password manager
All the above techniques are fine for the 2-3 passwords you really need to memorize (your main email and the manager itself). For the rest, the solution is a password manager:
What does a password manager do?
- Generates unique and random passwords for each service
- Stores them encrypted (you only remember one master password)
- Autofills login forms
- Warns you if a password has been compromised
Recommended managers
| Manager | Price | Platforms | |---------|-------|-----------| | Bitwarden | Free / €10/year | All | | 1Password | €3/month | All | | KeePass | Free (open source) | Windows, Linux, Mac |
What you should NEVER do
- Don't reuse passwords — If one leaks, they all fall
- Don't use personal information — Names, dates, football teams
- Don't store passwords in plain text — Not in phone notes, not in Word documents
- Don't share passwords by email or chat — Use a manager with sharing functionality
- Don't ignore breach alerts — If SecuryBlack tells you your email is compromised, change those passwords
Summary
| If you only do one thing... | Do this | |---|---| | Install a password manager | Bitwarden is free and excellent | | Use passwords of 12+ characters | Longer = more secure | | Never reuse them | Each service, its own password | | Enable 2FA | It's your safety net |
Want to know if your current passwords are already compromised? Check your email on SecuryBlack — it's free and takes 10 seconds.