The one password you have to remember
Your password manager’s master password protects every other password you own, and it is often the one an attacker can test offline if they steal your encrypted vault. That makes it the place to spend extra strength. Seven random words give about 90 bits, which stays out of reach even for well-funded attackers.
Words beat random characters here because you type this password by hand, often every day. A string of words is far easier to memorize than 16 symbols.
How to memorize it
- Write it down once and keep the paper somewhere safe, like your wallet, for the first week.
- Type it from memory every time you unlock, glancing at the paper only when you need to.
- After a week or two it will be automatic. Then destroy the paper or lock it away with your important documents.
Frequently asked questions
Should I change my master password regularly?
No. Change it if you think it was exposed. Forced regular changes tend to push people toward weaker passwords.
Can I add a word of my own?
You can, but it will not add much strength because an attacker may guess it. The random words do the work.