Your One Strong Master Password You Won't Forget
Okay so. Last time we got the password manager installed. It's sitting on your laptop right now, probably still asking you to make a master password, and probably you closed the laptop and walked away from that screen because it's the scariest blank box in the whole class.
Fair. It's the one password that unlocks all the other passwords. That's a lot of pressure for one little text field. Let's take the pressure off.
Here's the thing though...
You don't need something clever. You don't need symbols and numbers scattered around like confetti. You need something long, something only you'd think of, and something you will not forget by Thursday.
Long beats complicated. Every time. A short password with a bunch of weird characters crammed in is actually easier for a computer to guess than a long string of regular words. I know that feels backwards. It felt backwards to me too the first time somebody told me. But four or five random words strung together, that's your best friend here.
The four-word trick
Think of four words that have nothing to do with each other. Not a phrase, not a quote, not your kid's name and birth year, just four random words that popped into your head. Something like:
pancake-ladder-canyon-window
Doesn't have to be that one. Obviously don't use that one, now that I've typed it out loud. But that's the shape of it. Four unrelated words, strung together with dashes or just smooshed together, maybe swap a letter for a number if the site makes you.
Why does this work? Because "canyon" and "ladder" mean nothing to a stranger trying to guess your password, but they might mean something to you. Maybe you hiked a canyon with a broken ladder once. I don't know your life. That's kind of the point, nobody else does either.
Write it down. On paper. Once.
I know, I know, this whole module has been "don't write passwords on sticky notes." This is different. This is the one password, the master one, and for this one single password, paper is fine. Better than fine. Write it on an actual piece of paper, put it somewhere safe, like a drawer or a lockbox, not taped to the monitor. This is not a security contradiction, it's just common sense. Your password manager isn't any good to you if you forget the one key that opens it and nobody else has a copy.
I'd write it twice, honestly. Once for you, once for whoever would need to get into your stuff if something happened to you. Angela has mine. I have hers. We don't look at each other's, we just know where the paper lives.
Save first, then change it
This is the part I learned the hard way, and I mean the hard way. I was feeling very on top of things one afternoon, decided to update a password, typed the new one in, hit save... except I hadn't actually hit save, I'd hit something else, and the app logged me out before it took. New password existed only in my head for about four seconds, and then it didn't exist anywhere, because I'd already moved on to the next tab.
Forty minutes. Forty minutes of recovery emails and "are you sure this is your account" questions to get back in.
So here's the rule now, and I say this every single time somebody's updating a password: write the new one down somewhere, anywhere, sticky note even, BEFORE you type it into the site. Save it, confirm it saved, then throw away the sticky note. Save first, then change. Every time.
Doing this over the phone with my mom
I want to tell you about setting this up with my mom, because it's basically the blueprint for what we're doing today. Did it over the phone, hour and forty minutes, most of it me saying "okay, now what does the screen say, read it to me exactly." Not because she's not sharp. Because that screen is unfamiliar and unfamiliar things take longer, and that's true whether you're seventy or seventeen.
We built her a four-word password out of two grandkids' first names, mixed in the wrong order, plus a place she likes and a word for a food she doesn't like. Took a while to land on it. She's used it every day since, no notes, no trouble.
Hour and forty minutes for something she uses every single day for the rest of her life. For sure for sure worth it.
Do this right now
- Pick four unrelated words. Give yourself a minute, don't overthink it.
- String them together, add a number if the site insists.
- Type it into your password manager's master password field.
- Write it on paper. Twice, if you've got someone who'd need it.
- Put the paper somewhere real. Not the monitor.
Does that make sense so far... good. That's the hard part done. Everything after this is just filling the manager up, which is honestly the easy, kind of satisfying part.
Before next time
Bring your paper copy to next class, just to double check you can actually read your own handwriting under stress. You'd be surprised how often that's the actual failure point. 👍🌞