The purpose of this document is to help people navigate around the multitude of frequently-changing passwords that they deal with in this fast-paced modern era (both personal and work).
This list of resources and tips aims to support a variety of methods for storing and remembering passwords (acknowledging that there is no “one-size-fits-all” solution that will work for everyone).
Getting Organized:
Being Organized is the first step to remembering. Here are a few tips to help with General organization:
- Choosing One Place for all passwords (eg. Notebook, journal)
- Organizing by category (eg. home/work, fixed/changing passwords)
- Color-coding and labeling
- Using a Calendar (to note when changes will be required)
- Using Sticky notes (for that secret place you kept your PW book)
- Personalizing it to make it work for you!
Remembering Passwords:
The number of passwords and password changes can be overwhelming for anyone, and all of us come to this moment with different ages, abilities, languages, strengths and comfort levels with technology.
1-Analog (offline) tools:
- Visual reminders:
- Using pictures and written descriptions to help remember password
- Using a code when writing down the password (1 letter over in the alphabet, for example) in case notebook is found
- Dedicating a whole page in your notebook for one login that has to be frequently changed
- Using a pencil when saving periodically changing passwords
- Placing a reminder in an unusual place can help someone remember to do something. For example, placing a quarter on the steering wheel can help someone remember to fill up their gas tank.
- Audio reminders:
- Notes on phone
- Recording audio to play back the password as needed (some people have a hard time with the written format, and recording the passwords in an audio form can be helpful)
- Using a limerick or musical lyric as a way to memorize your passwords.
2-Digital Online reminders/tools:
- Using a password manager
- A password manager can help someone with ADHD store and access their passwords on any device. For example, LastPass allows users to create a master password that gives access to all the other passwords.
- Creating a hidden folder on your device that is password protected, where you can keep your passwords and access them while offline
- Utilizing a password-protected USB flash drive to store passwords, but remember to keep it stored in a secure place in your home or office so it doesn’t get lost
How to create strong, secure, easy to remember passwords:
- One of the main tips on several websites is to use a passphrase instead of a password. You can easily memorize 30+ characters by picking 5-7 unrelated words and make a sentence/story out of them. Add symbols between the words to increase the strength.
- Example: My*hermit*toad*nose*twice*tricked*sandwich
- From this website: Keyboard trick – choose a sequence of numbers that is easy to remember (a postal code, for example), then look for the numbers on the keypad and instead of using numbers, use the letters just beneath them.
- Example: Using the numbers 28921, the password would be “2wsx8ik9ol2wsx1qaz”.
- Use diceware to generate a secure passphrase
Here are some websites offering ways to create and store secure passwords:
- Kaspersky: How to create strong passwords
- Best Offline Password Storage Tips
- What is the Smartest and Safest Way to Store Passwords
Password managers (digital) - comparison of tools:
- Wired Magazine: Best Password Managers
- The Best (and Worst) Ways to Organize Your Passwords
- Consumer Voice: Best Password Manager
- The top three recommendations from this site are: Roboform, 1Password, and Keeper
- This site also notes “Many reputable password managers employ high levels of security to protect user data, but this does not make them impervious to attacks.”
Other security tips:
- Use a Virtual Private network (VPN): This article from Wired says a VPN is “like a protective tunnel you can use to pass through a public network, protecting your data from outside eyes.”
- Check your email on HaveIBeenPwned to see if it has been subjected to a data breach - check ALL your email addresses, and if there is a breach identified, change passwords - particularly if you have used the same password on multiple sites.