Courtesy of Dewald Pretorius of TweetLater, here’s a handy primer on how to create robust passwords that are nevertheless easy to remember:
TweetLater Newsletter
How To Choose Very Strong Passwords That Are Easy To Remember |
Step 1: Pick 2 Starting Characters
To make it easy to remember, all your passwords are going to start with the same characters. But these are not just any characters. Pick 2 characters from the list of special characters that you see above the numbers on your keyboard and to the left of the Enter key.
These characters are: ~`!@#$%^&*()_-+={}[]:;”‘<>?/|\
Pick any two of them as your password starting characters. To show you an example as you read through the steps, let’s pick $ and % (pick your own two).
In my example, all my passwords are going to start with $%.
Step 2: Pick 2 Ending Characters
In exactly the same way as above, pick two different special characters that will be at the end of your passwords. Don’t pick the same characters as your starting characters.
For the purposes of my example, let’s pick * and ^. Hence, all my passwords are going to end with *^.
Step 3: Construct The Middle Part Using The Website Name
This is the fun part. Take the first 6 characters of the website domain name where you want to use the password. If the domain name is shorter than 6 characters, then use the full domain name.
In my example, let’s create a password www.microsoft.com.
The first 6 characters of the domain name is “micros”.
Now we’re going to substitute some characters and capitalize others.
Substitute the following characters: a becomes @, e becomes 3, i becomes 1, o becomes 0, and u becomes ^.
Now we have “m1cr0s”.
Now, decide on a standard for yourself regarding which character(s) you’re going to capitalize.
For this example, let’s say we’re always going to capitalize the 3rd consonant.
So now we have “m1cR0s”.
The next step is to drop the last character (“s” in our case), and append the Ending Characters (*^) that you picked in Step 2.
Our password is now “m1cR0*^”.
The last step is to add the Starting Characters (Step 1) to the beginning of the password.
The final password is “$%m1cR0*^”.
A Few More Examples
Domain: www.twitter.com, Password: “$%tw1Tt*^”.
Domain: www.tweetlater.com, Password: “$%tw33T*^”.
Domain: www.facebook.com, Password: “$%f@c3B*^”.
Remember
Pick your own 2 starting characters and your own 2 ending characters, don’t just use the same ones I used in the example.
In addition, make your own capitalization rule (you can capitalize more than 1 character if you want to.
You can also use more than the first 6 characters of the domain name if you want to. It just means your passwords will be slightly longer.
Is This Password Strong?
Yes, it is very strong. With this method you’re potentially using any of 30 special characters, 10 numerals, and 26 lower case and 26 uppercase characters.
Unless a hacker happens to have a water-cooled supercomputer in his briefcase, he will not be able to crack your password.





March 14th, 2009 at 9:28 PM
For general use, take the first letters of a memorable phrase or song lyric instead of the website hostname.
For example, “Don’t cry for me, Argentina” could translate to “dcfma” or “Dc4m@”. Add your prefix/suffix rules and you get the horrible-looking “$%Dc4m@*^” And if you must write down your password so you can remember it, you can instead write down the mnemonic device that reminds you of the phrase your password is based on: Evita.
Strong passwords aren’t as difficult as most people think but we need to popularize simple tricks like this to help keep people secure.
[Reply]
March 15th, 2009 at 5:15 AM
Thanks, Bob – good suggestion. kc
[Reply]
June 2nd, 2009 at 8:08 PM
This is a really good write up, I passed on the link. Thanks!
[Reply]
Kevin Reply:
June 2nd, 2009 at 8:16 PM
ejly: thanks for stopping by! Glad it was of help.
[Reply]
November 15th, 2009 at 1:02 PM
Hi,
good suggestion :-)
Only problem: you come to a site, that does not allow special chars in your password…
And I am missing the point in your rules: you pick the first six characters of the domainname, but you drop the sixth anyway ?!
best regards
Paul
[Reply]
Kevin Reply:
November 15th, 2009 at 1:51 PM
Paul – Thanks for commenting; agree on both points. kc
[Reply]