How to Create a Memorable Password That's Actually Strong

A passphrase like lavender-tractor-window-42 is both memorable and far harder to crack than P@ssw0rd1. Length contributes more to entropy than character substitutions, and memorable phrases are long. The trick is ensuring the words are genuinely random, not chosen by your own predictable judgment.

The problem with memorability shortcuts

The standard advice for years was to take a word and transform it: capitalise the first letter, add a number, replace some letters with symbols. cat becomes C@t2024. This felt secure because it looked complex. It is not, for two reasons.

First, the substitutions are predictable. Every password-cracking ruleset applies common substitutions automatically: a → @, e → 3, o → 0, i → !. The transformation does not expand the search space significantly because it is a known transformation. The attacker's software tries every word in its dictionary with every standard substitution applied — and does so at billions of guesses per second.

Second, the base word is short. A transformed 8-character password drawn from a 94-character set has roughly 52 bits of entropy if it were truly random — but because the structure is predictable (capital first letter, number at the end), the practical entropy is much lower. The password is recovered not by brute force but by targeted rules.

Why length wins

Entropy scales with both character set size and length, but length has a larger multiplying effect. Each additional character multiplies the search space by the size of the character set. Adding a lowercase letter multiplies by 26; adding another character of any type multiplies by at least 26 and often 94.

A 20-character lowercase passphrase drawn from English words has approximately 94 bits of entropy — far more than an 8-character mixed-character password. The attacker would need to crack each of the 20 characters independently across the full 26-letter alphabet, which is a vastly larger space than the 8-character mixed-character string despite the latter appearing more complex.

Passphrases: the correct approach

A passphrase is a sequence of several unrelated words. The crucial factor is that the words must be chosen randomly, not by you. Human judgment introduces patterns: we unconsciously pick words that relate to each other, to our interests, to our personal lives, or that simply sound good together. Attackers know this. Wordlists and targeted dictionaries include words common to particular demographics, hobbies, and cultural backgrounds.

Random word selection removes that bias. The resulting phrase — even though it consists of ordinary words — is strong because an attacker cannot narrow the search based on assumptions about you.

The Diceware method

Diceware is the most rigorously random approach to passphrase generation that does not require software. The method:

1. Obtain a Diceware wordlist — a numbered list of roughly 7,776 words, each corresponding to a unique five-digit dice roll.
2. Roll five physical dice and record the result. This gives you a five-digit number.
3. Look up the word in the list corresponding to that number.
4. Repeat steps 2–3 five or six times.

The result is a passphrase of five or six unrelated words. The entropy is calculable and precise: with a 7,776-word list, each word contributes approximately 12.9 bits (log₂ of 7,776). Five words give roughly 64 bits; six words give 77 bits. These are conservative, because the randomness is from physical dice — not a human choosing words that feel random.

An example might be: correct horse battery staple (this is from a well-known illustration — do not use this specific phrase). A real Diceware result would be something like tinsel valve muffin probe shrug — related to nothing, which is precisely the point.

Software-generated passphrases

Software can do the same thing as Diceware if it uses a CSPRNG to select words. The word selection should be uniformly random across the wordlist, with no human input on which words feel appropriate. Some password managers include a passphrase generator that works on this principle.

The advantage over physical dice is speed; the disadvantage is that you must trust the software's randomness source. For most people, a browser-based or manager-based generator using crypto.getRandomValues() is adequate. For high-stakes uses (a master password for your manager, a device login), Diceware with real dice provides unambiguous assurance.

When to use a passphrase vs a generated password

Passphrases are most useful for passwords you genuinely need to memorise and type. The main examples are:

• Your password manager's master password. You cannot store this in the manager itself. It must be memorable and strong. A six-word Diceware passphrase is ideal.
• Device login passwords. Your laptop or phone lock screen — typed frequently, must be memorable.
• Emergency recovery passphrase. If a manager has an emergency-kit passphrase, it should be long and memorable.

For everything else — accounts stored in a manager, passwords you access only through autofill — a fully random generated password is the better choice. It is stronger per character and there is no memorability requirement.

Adding structure without reducing entropy

If a site requires uppercase letters, digits, or symbols in its password (a common but increasingly outdated requirement), you can meet this without making the passphrase weaker. Capitalise one word. Replace one separator with a digit. Add a symbol at the end. These additions increase strength if done without a predictable pattern — but do not rely on them as the primary source of strength. The length and word randomness are what matter.