Post-Gazette The perfect password would be both unpredictable and memorable, but that’s a tough combination, said Lorrie Faith Cranor, director of Carnegie Mellon University’s CyLab Usable Privacy and Security Laboratory. As a leading researcher on passwords, she’s seen thousands of them, and they’re rarely as clever as their creators imagined. How about 1qaz2wsx? Sorry, that diagonal march down the left side of the keyboard is well known to hackers, who have programs that spit out the most common passwords and test systems machine-gun style. And if the hacker wants you specifically, they’ll check your social media for, say, the names of your pets. CyLab student Blase Ur last month traveled to Seoul, South Korea, to present the lab’s most recent paper on passwords. The bottom line: “Random is best, but random is hard to remember,” so it’s important to find the right balance, Ms. Cranor said. “We’ve been looking at what are the ways that you can actually make passwords stronger without actually driving users crazy.” So what’s good? Long passwords — 12 characters or more — are much harder to predict than short ones, regardless of their composition, said Ms. Cranor. Systems increasingly demand a mixture of letters, numbers, punctuation and capitalization. That’s more secure, but can be far better if the capital letters are not at the beginning and the punctuation is not at the end, she said. If you always capitalize, say, the third letter in your passwords, that quirk can improve security while remaining memorable. CMU’s studies indicate that exclamation points are the most popular password punctuation, so anything else would probably be better.
Beyond the obvious dumb passwords — 12345678, iloveyou, pa$$w0rd — Ms. Cranor advised to avoid your mother’s maiden name, children’s names or birthdays, or other easily identifiable trivia from your well-documented life. Random words strung together would be better than common phrases. “Song lyrics?” she said. “Not such a good idea.”

Let me start off first by saying I hate passwords. The only thing I hate more than passwords are the assholes out there who are the reason we need passwords. Some of the worst days at work revolved around the ole “Your Password Expires in X Days” notification. Fortunately I have been able to one-up IT’s BS.
Yuppie Yinzer Life Hack 1:
“It needs to be 8 characters and include letters & numbers…”
Boom… pirates15
“…with at least one capital…”
Fine, Pirates15
“…and one special character…”
Alright my Twitter game is on point, #Pirates15
“…but it has to lead with a capital letter.”
Jesus already, Pirates#15
Sure the Pirates are #1 but you have to keep in mind that will only work for so many days and rather than going through the misery of changing your password to Pirates#2 (fucking Cardinals) you can just roll with Pirates#15, Pirates#16, Pirates#17….
IT at my office thought they could one-up me when they made the dozens of login’s I have expire at different intervals so at any particular moment I could have different passwords everywhere. This is where hack # 2 was born.
Yuppie Yinzer Life Hack 2
Hide a file with your passwords in plain sight on your desktop.

The real trick here is in the naming structure. Much like you named the porn on the family computer “musak” or “science experiment” a name like “Not My Password List” gives you a nice safe haven to start yourself a concise library with all your passwords quickly available for your reference. Boom, check mate IT.
Since I’m feeling nice, lets just roll this into…
Yuppie Yinzer Life Hack 3
Make the answer to every security question the same answer that you’ll never forget… for me “Jack Bauer”

Every couple of months when writers have nothing else to write about they click bait you with a reminder that passwords like “password” “123456” and “qwerty” are garbage and easy for hackers to guess. Every tech company wants you to know that these crazed lunatic hackers have all kinds of codes to figure out your rock solid passwords, but none of these sites put any importance into your security question? That’s just lazy journalism. You need to deter hackers with passwords made up of random letters you’re going to forget in 2 two minutes but you can throw them off your scent with super secret info like your mothers maiden name? Give me a freakin break.
Not only does this life hack keep the hackers guessing but also helps you remember what your answers are. Granted, your mother’s maiden name is pretty easy but what about the street your best friend grew up on. Maybe you were a social butterfly and had so many friends its difficult to remember not only who you had in mind that day but what street they lived on?
The easiest hiding spot is right under these criminal’s noses. If you go and blatantly lie no criminal is going to want to touch your deceitful accounts.
Go ahead and use all three Yuppie Yinzer life hacks and see how enjoyable your life at work can be.