How to choose passwords you’ll actually remember

Length beats complexity, and a manager beats memory. A short, practical guide to passwords that are both strong and human.

The advice you grew up with — a capital letter, a number, a symbol — produces passwords that are hard for humans and easy for computers. There is a better way.

Length beats complexity

A passphrase of four or five random words is far stronger than a short scramble like P@ssw0rd!, and you can actually remember it. Entropy comes from length, not punctuation.

correct-horse-battery-staple   ->  very strong, easy to recall
P@ssw0rd!                      ->  weak, and a pain to type

How the math shakes out

Password	Length	Time to crack
qwerty	6	instant
P@ssw0rd!	9	a few hours
correct-horse-battery	21	centuries

A routine that works

1. Use a unique password for every account
2. Let a manager generate and store them
3. Protect the vault with one strong passphrase

Before you call it done:

• Unique password per account
• Password manager set up
• Two-factor turned on everywhere

You only need to remember one strong password — the one that unlocks the rest.

---

Try our free password generator — it runs entirely in your browser.