'How to have lots of passwords without struggling to remember them' blog discussion

The worst mistake people make with passwords is to just use a word from the dictionary.

This is why complex passwords are pushed by people as being important, for example so a password of "hello" is much less secure than "hello@123"

However people could happily use 3 words followed by spaces such as

"my secure password"

A password like this would take forever to crack and contains little complexity for the user to remember (and stops passwords being written down).

The important thing to remember is that a password cracker cannot guess each individual word when you set a password it either guesses all of it or none at all, so although a password like "my secure password" does not look complex enough it is would take longer than you would live for a hacker to crack.

As a new user I'm not allowed to post links, but if you search for the following in google then the above is covered in some good detail "the-usability-of-passwords-faq"

Also as suggested by a previous user, something like keypass is a god-send.

Hope this helps!