This article was co-authored by Brandon Phipps and by wikiHow staff writer, Hannah Dillon. Brandon Phipps is a Technology Specialist based in Bakersfield, CA. He is the owner of Second Star Technologies and specializes in Managed IT Services for small and mid-sized businesses in Bakersfield, CA. With over 23 years of experience, he offers expert cloud computing, cybersecurity, and network management solutions. Brandon is a committed community member and coach who leads and innovates in tech and sports coaching. His dedication to local businesses and communities is evident in his hands-on, tailored approach to IT solutions.
This article has been fact-checked, ensuring the accuracy of any cited facts and confirming the authority of its sources.
This article has been viewed 615,700 times.
When you're creating a password for an online account, how exactly do you make it as strong and secure as possible? There are a few things you can do to make a very strong yet easy-to-remember password, but without falling into some of the common pitfalls that make your password too easy to guess. In this article, we'll teach you how to make a secure password, how to use a password manager, and things to avoid when making a password. Keep reading to learn more.
How to Make a Strong Password: Quick Steps
- Pick a memorable phrase or series of words.
- Choose parts of those words (such as the first three letters of each word).
- Add numbers to your password, in between the letters you picked.
- Switch some of the letters in your password to numbers or symbols.
- Make sure your password is at least 14 to 16 characters long.
- Memorize your password, or use a password manager to keep track of it.
Steps
Creating a Secure Password
-
Choose a memorable sentence or series of words. This is a useful starting point for making a password that's complex and difficult to guess while easy for you to remember. While you should stay away from personally relevant information or common phrases, it's still convenient to create a password that you can recall without much trouble. Crafting a statement or sentence that will stick with you can serve as a useful basis for your password.
- You can pick a sentence, or you can choose a random assortment of words that are memorable to you. For example, you could start with the random words "Pancake, Opera, Ribbon."
- Avoid choosing words that are significant to you in a way that someone could guess. Don't use words related to your profession or where you live.
- You should also pick words that aren't related to your username at all. If your username is "pancakefreak96" or "i_love_opera," these words wouldn't be a good choice for a password.
- If you opt to make your password a sentence, it is also sometimes called a "passphrase."
EXPERT TIPBrandon Phipps is a Technology Specialist based in Bakersfield, CA. He is the owner of Second Star Technologies and specializes in Managed IT Services for small and mid-sized businesses in Bakersfield, CA. With over 23 years of experience, he offers expert cloud computing, cybersecurity, and network management solutions. Brandon is a committed community member and coach who leads and innovates in tech and sports coaching. His dedication to local businesses and communities is evident in his hands-on, tailored approach to IT solutions.Technology Specialist
Brandon Phipps
Technology SpecialistFor better security, choose a long, complicated passphrase that you'll be able to remember. A passphrase is a longer password consisting of at least 14 characters that are based on words or phrases that are meaningful to you. For example, the phrase "I eat ice cream in summer" can be transformed into "!8!ceKRAM!n$umm3R." You'll remember your passphrase easily while keeping your data secure.
- You can pick a sentence, or you can choose a random assortment of words that are memorable to you. For example, you could start with the random words "Pancake, Opera, Ribbon."
-
Take parts of your phrase to start creating your password. You could use the first one, two, or three letters from each word to create the basis for your password. For example, you could start with "Pan Ope Rib" if you went with the three random words of "Pancake, Opera, Ribbon."
- Make sure to include both upper- and lower-case letters. Most websites require you to add at least one of each in your password.
- Don't just capitalize the first or last letter of your password. Mix upper- and lower-case letters throughout your password to be as secure as possible.
Advertisement -
Create a complex but memorable sequence of letters and numbers. Add numbers to your password to make it lengthy, hard to guess, but easy for you to remember. A secure password should be 14 to 16 characters long.[1]
- For example, if May 1996 is memorable to you, include that in your password. Intersperse the numbers between the letters, like "Pan05Ope19Rib96."
- Don't use your birthdate, anniversary, or any other easily guessable date. Perhaps May 1996 was the month you got your first bike.
- You could also switch some of the letters to numbers, like switching an A to a 4. In our example, you could make your password "P4n05Ope19Rib96."
- For example, if May 1996 is memorable to you, include that in your password. Intersperse the numbers between the letters, like "Pan05Ope19Rib96."
-
Switch some of the letters to symbols. Pick symbols that look like letters so it's easier for you to remember. Adding symbols makes your password even harder to guess, and many websites require you to add symbols when creating a password.
- In our example, you could change "P4n05Ope19Rib96" to "P4n05Ope19R!b96." An exclamation point (!) is an easy replacement for a lowercase i.
- Most websites will only accept certain symbols in your password. Avoid using difficult symbols that are hard for you to type, as this will make it harder for you to type your password accurately.
-
Memorize your secure password. Even if your password is made up of words and numbers that are memorable to you, it will take some time to memorize your password. If you're having trouble remembering your passwords, consider using a password manager.
- If it is extra hard to remember your password, consider making it a little easier to remember. While "Pancake9Opera6R!bbon" is less secure than "P4n05Ope19R!b96," it's still better than just "pancake."
- The harder your password is to guess, the more "entropy" it has. However, the tradeoff is that passwords with high entropy are hard to remember.[2]
- If it is extra hard to remember your password, consider making it a little easier to remember. While "Pancake9Opera6R!bbon" is less secure than "P4n05Ope19R!b96," it's still better than just "pancake."
Using Password Managers
-
Select a password management program. Password managers are encrypted programs that save your passwords and auto-fill that information for you when you log in to a website or app. Most password managers also have the ability to generate random passwords for you, cutting down on your need to make your own complex and secure passwords. There are plenty of password managers out there, and each have their own pros and cons. Choose one that works for you. Below are some of the most popular password managers available:
- Bitwarden: Many people prefer Bitwarden because it works well and isn't very expensive, with free options available.
- 1Password: 1Password has been around for a while, and people praise its "Quick Access" feature that lets you easily search your login credentials.
- Apple Passwords app: If you're in the Apple ecosystem, this app is easy to use, but some consider it too simplistic.
- LastPass: Another well-known password manager, though some don't recommend it due to past data breaches.
- Most modern web browsers (like Chrome, Edge, and Firefox) also have built-in password managers that can save and even suggest passwords for you. However, these are considered less secure than standalone password management apps.
-
Download and install a password manager. Specific instructions will vary depending on which program you select, so be sure to follow instructions carefully. Generally speaking, you'll need to visit the password manager's website and click a "download" button before following the installation instructions associated with your operating system.[3]
-
Set up your password manager. Again, the process will vary depending on the specific program. Most popular programs are pretty user-friendly when it comes to core functionality.
-
Customize your preferences. For example, you can decide whether you want the program to automatically log you in to sites and whether it audits your unique passwords to ensure they're sufficiently different and changed regularly.
-
Consider "peppering" your password manager passwords. "Peppering" is an added layer of security. A "pepper" is an extra, short string of letters, numbers, and symbols you add after your password manager has filled in the saved password for your login. This is also a way to safeguard against data breaches; if your password is discovered in a breach, the hackers won't have your actual password, because they don't have your "pepper."[4]
- For example, imagine one of your account passwords is "Yt$1!aP3c?a3N." However, your password manager only has "Yt$1!aP3c" saved for that account. When logging in, you'll manually type "?a3N" after your password manager auto-fills that account's password. "?a3N" would be considered your "pepper."
Want to save this article? Download it as a PDF.
How to Make a Strong Password That You'll Remember
Get the full formatted PDF you can save, print, or read offline. Anytime, anywhere.
One-time purchase
Expert Q&A
-
QuestionWhat are some good password ideas?
Luigi OppidoLuigi Oppido is the Owner and Operator of Pleasure Point Computers in Santa Cruz, California. Luigi has over 25 years of experience in general computer repair, data recovery, virus removal, and upgrades. He is also the host of the Computer Man Show! broadcasted on KSQD covering central California for over 7 years.
Computer & Tech Specialist
To make a very secure password, focus on the length. For instance, you might think of 3 words that normally wouldn't go together, and put them together in a password. It will take a computer about 60 years to figure out a 10-12 character password, even if it's all lowercase letters with no special characters. -
QuestionWhat are the rules to create a secure password?
Luigi OppidoLuigi Oppido is the Owner and Operator of Pleasure Point Computers in Santa Cruz, California. Luigi has over 25 years of experience in general computer repair, data recovery, virus removal, and upgrades. He is also the host of the Computer Man Show! broadcasted on KSQD covering central California for over 7 years.
Computer & Tech Specialist
It's a good idea to have at least 2 or 3 passwords that you use for different sites. That way, if one password is compromised, you won't have as many sites that you need to go in and change. -
QuestionIs it safe to use a lesser-known nickname as a password?
Community AnswerUsing a nickname as a password is acceptable if it isn't easily linked to your real name. For better security, choose an uncommon nickname and consider adding numbers or symbols to increase its strength.
Tips
References
- ↑ https://bitwarden.com/blog/how-long-should-my-password-be/
- ↑ https://proton.me/blog/what-is-password-entropy
- ↑ https://www.consumerreports.org/electronics-computers/password-managers/how-to-use-a-password-manager-a7687059222/
- ↑ https://passwordbits.com/salting-passwords/
- ↑ https://www.cisa.gov/secure-our-world/use-strong-passwords
- ↑ https://www.cisa.gov/secure-our-world/use-strong-passwords
- ↑ https://security.stackexchange.com/questions/17940/is-it-safe-to-generate-passwords-online
About This Article
1. Pick a password that's 8-10 characters.
2. Use at least one uppercase and lowercase letter.
3. Use spaces or underscores.
4. Create distinct passwords for all sites.
5. Use a special character if permitted.
6. Update passwords regularly.
7. Sign up for a password manager.
8. Avoid predictable sequences and dictionary words.
Reader Success Stories
-
"Excellent advice. We live in a world that requires us to be actively involved in protecting our personal information, and the need for multiple passwords and the frequent changes to those passwords becomes a challenge. This site makes it more manageable."..." more















