LastPass - How to create a strong and memorable password
1Password is replacing LastPass as UW-Madison's supported Password Manager. 1Password was selected for its intuitive user-friendly interface, robust set of features, and excellent track record in safeguarding sensitive data.
Current LastPass users are being invited to 1Password starting in December 2024. LastPass will remain active until May 2025. For more information and updates, refer to the transition FAQ: 1Password - LastPass Transition FAQs
This document details strategies and directions for creating strong passwords and passphrases
Password creation advice has changed
significantly over the years from:
Use irregular capitalization, special
characters, and at least one numeral
To the current NIST (National Institute of
Science and Technology) recommendation,
which is to create a simple, but long passphrase. Passphrases are typical English words but linked together similar to a sentence.
For example, creating a password as phrases of common words in uncommon
combinations, such as:
speedy hot broccoli anteater
make your password much harder to crack. If the phrase produces a vivid image, or has meaning for you, it will be that
much easier to remember. Here are more examples, such as your favorite things
- 1938 Schwinn Paramount Bicycle
- Porsche 911 1963
- 1927 Chris-Craft Cadet
- Cessna 172 Skyhawk
- Good & Plenty Licorice Candy
- Boni Giant Sengi
- Northern Saw-Whet Owl
- 1984 Stay Puft Marshmallow Man
- Statue of Liberty, Liberty Island New York, NY 10004
Note – In most modern applications you can use spaces in your passphrase.
By creating a strong and memorable passphrase for your LastPass Master Password and/or for your NetID Login, you can then use LastPass to generate random, strong, unique, hard to remember passwords for each of the websites you use and you only need to remember a single strong passphrase.