How do I create a strong password I can remember?

A strong password should have a minimum password length of 12 to 16 characters, include lowercase and uppercase alphabetic characters, numbers and symbols and be randomly generated.

But a strong password is difficult to remember. This makes for a password that is very difficult to remember.

Use Passphrases!

Passphrases or passphrase derived passwords are easy to remember, whilst remaining difficult to crack.

Passphrases work because a phrase such as:

My grandmother Ethel paid £39 for a blue rinse!

Is easy to remember, particularly if you have a grandmother called Ethel who has blue hair.

This becomes the passphrase MygrandmotherEthelpaid£39forabluerinse! which is an extremely long and complex password. If this is too long (many systems have maximum password lengths), you can turn it into the password:

MgEp£39fabr!

using the first letters of each word.

When you need to change the password, change a word in the passphrase:

My grandmother Ethel paid £39 for a pink rinse!

My uncle Bert paid £39 for a blue rinse!

My grandmother Ethel paid £32 for a blue rinse!

The more interesting you make the phrase, the easier it is to remember.

Or use a generator 

A password generator can generate a strong password for you. My personal favourite is https://nessiepass.com  which generates a variety of different passwords that are somewhat memorable, (loosely) based on the fine, Scottish dialect. 

Use your browsers' password manager

Modern browsers come with builtin password generators and managers for passwords you use in websites. We recommend Microsoft Edge (on PC and Mac) if you are use Microsoft 365 as it tightly integrates with it. Install it and sign in with your Office 365 credentials on every device you use and your passwords will be available everywhere you need them.

Or use a Password Manager (particularly for teams)

A password manager allows you to store passwords and generate the 2FA access codes for most systems, making it a perfect choice for teams who need to work and share passwords across systems. We use and recommend https://1password.com/