Passwords can be divided into those we absolutely must remember (the password to decrypt the drive, to log in to the computer, and for the password manager) and those stored in the password manager. When creating the former, it is worth following a few good rules:
- The password should contain a combination of characters such as upper- and lower-case letters, special characters and numbers,
- It should be of sufficient length, e.g. at least 14 characters,
- Strong passwords can be created by using several unrelated words,
- The password should be long enough to make it difficult to guess (a minimum of 4 words, and it is good practice to include words in more than one language),
- The words used to create the password should not be related to one another, nor should they refer literally to well-known sayings or the titles of books and films; creativity in paraphrasing is recommended,
- The password should not contain the name of the website or any other distinctive information that would reveal its intended use, e.g. the name of the service for which the password is intended,
- The password should be easy to remember despite its complexity,
- Quotations should be avoided,
- Passwords that follow the format of calendar dates, number plate numbers, telephone numbers or other numbers that could be found in the user’s personal details should be avoided.