How to Make a Strong Password You Can Remember

In this guide, we explain how to create passwords that are genuinely hard to crack without making your life harder every time you log in.

A strong password starts with its length. Back in the day, the security standard was 12-character passwords, but eventually it was upgraded to 16 characters or more.

Complexity also helps, but a long password made from random words can be just as strong as a jumble of characters and much easier to remember.

Uniqueness matters as much. Reusing a single strong password across multiple accounts can still lead to account takeovers if a single website is compromised and attackers try the same login on other sites.

Also, tricks like changing “password” into “p@ssw0rd, adding “1!” at the end, or using birthdays, pet names, and other personal details are weaker than they look because cracking software already checks for those patterns.

The passphrase method is the modern gold standard for creating memorable passwords.

Instead of forcing yourself to remember something like “X9!qR2#vL0”, choose four or more completely unrelated words and string them together, such as #Staple-Gorilla-Chair-Tuesday22#.

The key aspect is randomness: phrases like “my red coffee mug” are easier for humans and software to guess because the words make sense together.

That’s why a weird combination of unrelated words gives you length, unpredictability, and something your brain can still hold onto.

The sentence method, often associated with security expert Bruce Schneier, turns a memorable sentence into a password.

Start with a sentence that means something to you, then use the first letter of each word and mix in numbers, capitalization, or symbols.

For example, “You won’t guess my pass” could become “UW@ntG3$$MaKfeR!”. This method is especially useful for your master password or a few high-priority accounts, because the original sentence provides a memory hook without making the final password obvious.

The PAO method works well if you think visually. Pick a person, an action, and an object, then turn that mental image into a password.

For example, imagine “Einstein juggling pineapples.” You could take parts of each word and add symbols or numbers to create something like “EinJugPin!42”.

The stranger the image, the easier it is to remember, which is exactly why this technique can work better than memorizing random characters.

• Using the same strong password everywhere: if one account is breached, attackers can try that password on your other accounts, such as email, banking, shopping, and social media.
• Creating predictable patterns: passwords such as “Facebook123!” and “Gmail123!” feel customized, but password crackers know to check for site names plus sequence numbers.
• Relying on obvious substitutions: replacing @ for a, 3 for e, or 0 for o, is too common, and crackers also know about this.
• Saving passwords somewhere unsafe: creating a strong password but saving it on an unprotected note, spreadsheet, or photo on your phone.

Memory tricks are useful, but they don’t scale.

You might be able to remember a handful of passwords, but most people have dozens of online accounts. All of them should use different strong passwords, and that’s where memory alone becomes unrealistic.

A password manager solves this by generating strong passwords, storing them in an encrypted vault, and autofilling them when you log in. In this case, the only password you have to remember is the master password that unlocks the vault, which is where the passphrase or sentence method becomes especially useful.

A password manager like Keeper uses zero-knowledge encryption, which means even the company can’t see what’s stored in your vault. It can also generate strong passwords or passphrases, sync them across devices, autofill logins, and monitor for breached credentials. Keeper also supports biometric login, so once everything is set up, you don’t need to type your master password every single time.

Essentially, instead of trying to invent and remember a unique password for every account, you only need to create one excellent master password and let the password manager handle everything else.

Ultimately, strong passwords don’t have to be impossible to remember gibberish.

A long, random passphrase, a sentence-based or PAO password, provides you with something secure enough for real life and memorable enough to use.

However, for everything beyond your master password, a password manager is the practical answer. Tools like Keeper handle the heavy lifting, including generating, storing, and autofilling strong passwords across every device, so the only password you ever need to create yourself is the one that opens the vault.