How to Create a Strong Password You Can Actually Remember

Long passphrases, password managers and the mistakes that put your accounts at risk.

Editorial TeamNovember 4, 20261 min read

Weak or reused passwords are one of the easiest ways for accounts to be hacked. The good news: a strong password doesn't have to be impossible to remember.

What makes a password strong?

Length: longer is stronger. Aim for at least 12–16 characters.
Unpredictable: no names, birthdays, pet names or common words like "password".
Unique: a different password for every important account.

Use a passphrase

A passphrase is several random words joined together. It's long, hard to guess and easier to remember than a jumble of symbols.

For example: Purple-Kettle-River-Dance-42 — don't use this exact one, but create your own in the same style.

Pro tipPicture a silly scene using your words, like a purple kettle dancing by a river. Strange images are easier to remember.

Use a password manager

A password manager creates and stores strong, unique passwords for all your accounts. You only need to remember one strong master password.

Many phones and browsers have built-in password managers, and there are trusted standalone apps too.

Turn on two-factor authentication

Even a strong password can be stolen. Two-factor authentication (2FA) adds a second step, like a code from an app, so a password alone isn't enough to get in.

Common mistakes to avoid

Reusing the same password on many sites
Writing passwords on sticky notes near your computer
Sharing passwords by text or email
Ignoring breach alerts from websites or your password manager

Start with your most important accounts: email, banking and social media. Securing your email is especially important, because it's used to reset everything else.