Close-up of computer screen, focused on a password field.

The password conundrum: Choosing and remembering strong passwords

Last Updated : July 2017
Published By : Allstate

The password: It protects important personal, professional and financial information online. And you've heard the warnings: Never use the same password across accounts; don't choose familiar words or numbers; change your password frequently.

But, with the number of accounts people need to access, this might be challenging.

It's a password conundrum: How do you keep your data secure and still remember all your passwords? From good old-fashioned memory techniques to tools and apps, here are a few ideas to help.

Choosing a password

According to GCFLearnFree.org the more diverse and longer the combination of letters, numbers and symbols, the harder a password is for hackers to crack. To that end, they recommend never using personal information, always using at least six characters, including both numbers and symbols, and avoiding words that can be found in the dictionary, among other things.

The United States Computer Emergency Readiness Team (US-CERT) warns us, however, to watch out for common letter-to-symbol conversions, such as using the numeral "0" for the letter "o" or "1" for the letter "i," as cybercriminals' sophisticated tools can catch on quickly.

You should also avoid using familiar phrases, famous song lyrics and quotations, says US-CERT. Instead, they suggest you create passphrases. For example, you could turn "I like to walk my two dogs in Jefferson Park." into "iLtWm2dIJp!"

Get identity protection from Allstate.

Allstate's identity restoration is a simplified identity protection plan starting at just $3/month for individuals or $6/month for families.

get started today

Remembering passwords safely

Even with the techniques above, when you're managing numerous accounts and using more than one device, it's easy to lose track of some of your login information. If you're still having trouble remembering all your passwords, you have a few options:

  • Use a password manager. A password manager is an app or web browser add-on that securely stores your logins and passwords. You can customize it to autofill your passwords and some apps may even generate (and remember) strong passwords for you, says US-CERT. Some password managers also have an option that allows you to set a master password that helps protect access to all your other passwords and login information.
  • Set password recovery options. Many websites have a password recovery option so you never get locked out of your account. Simply enter an alternative email or your mobile phone number so you can receive an automated reset link in the event you're locked out of your account.
  • Go analog. You can still write down your passwords — just keep your list in a safe place away from your computer, US-CERT says. Don't ever store them in a file on your computer or any devices.

Once you've found a system for choosing strong passwords — and remembering them — you'll be able to help minimize the chances of your data being compromised.

you're in good hands®
Our website is filled with tips and general information to help you understand the different aspects of insurance and certain topics that many of us face in our everyday lives. Please recognize that a particular tip may not be effective in every circumstance. The above content is provided for informational purposes only and does not relate to or affect coverage under any specific insurance policy. We encourage you to read your specific policy and/or speak to an insurance representative to fully understand your coverages, discounts, savings, or other features. Coverages, discounts, savings, or other features vary between insurers, vary by state, and may not be available in all states. Insurance coverage is subject to your specific policy terms & conditions. Allstate is not responsible for, and does not endorse the content of, any third-party website that might be hyperlinked from this website. Allstate is not affiliated with, endorsed by, or sponsored by any third-party website or source that may be hyperlinked from this website.