Memorable passwords: the trade-offs behind a familiar idea

Adding a year and a symbol to a familiar word can feel like enough. This article looks at why a password's construction matters more than that impression.

The biggest mistake humans have made in cryptography is trying to force ourselves to think like computers .

Computers love absolute randomness, strings of characters with no patterns, such as hF8$pK2@q. But the human brain is not a hard drive; our neurons store information through "stories, visuals, and logical associations" . Forcing humans to memorize meaningless gibberish is a recipe for disaster.

As a result, we either revert to incredibly dangerous weak passwords like "123456", or we write down our complex passwords on sticky notes attached to our monitors (which is equivalent to leaving the front door unlocked).

In truth, the highest realm of cryptography does not require you to become a cold machine, but rather a poet full of imagination .

Length alone does not determine a password's resistance to guessing. The selection method matters: examples printed here and words chosen from personal habits should not be treated as randomly generated secrets.

A memorable story can help recall a secret after it has been selected, but inventing familiar words does not make that selection random. Do not reuse the public examples here as passwords or assume a personal separator guarantees strength.