Why a Password Manager Beats Your Brain and Your Sticky Notes
Okay so. New module. We've done files for three lessons, and now we're switching over to passwords, which honestly might be the thing I get the most pushback on all six weeks.
Here's the thing though. Everybody's already decided how they feel about passwords before they walk in the door. Either you've got a system you like (sticky notes, a notebook, the same password with a number added on the end) or you've just given up and you're clicking "forgot password" four times a week like it's a personality trait. Both of those feel fine day to day. Neither one is fine. I want to talk you out of both of them today.
The pitch, up front
A password manager is an app that remembers every password for you, generates new strong ones when you need them, and fills them in automatically when you log into something. You remember exactly one password — the one that gets you into the manager. It remembers everything else.
That's it. That's the whole idea. Everything else today is just me convincing you it's worth doing and then walking you through setting one up.
The mild fight I'm willing to pick
People think their own memory, or a sticky note, or reusing one password everywhere, is safer because it's theirs. Personal. Private. Nobody else has it in their head.
It isn't safer. Full stop. That's opinion number three in my personal top six, and I'll die on this hill a little bit.
Here's why. If you reuse one password everywhere, and one of those websites gets hacked — which happens constantly, to big companies, not just sketchy ones — that same password now unlocks your email, your bank, all of it. One leak becomes every account you own. And a sticky note ringing your monitor is only private until somebody's in your house. Repair person, grandkid, whoever.
I had a neighbor with 23 passwords on sticky notes around his monitor. I counted. About a third were crossed out and rewritten because they'd changed and he forgot to update the note. We didn't lecture about it, we just said okay, let's give these a home, and set up a password manager together in one sitting. Took maybe 45 minutes. He hasn't touched a sticky note since.
What we're actually going to do today
- Pick a password manager. For this class we're using one of the free, well-known ones — I'll point you to it on your screen. Doesn't need to be the fanciest one, needs to be one you'll actually open.
- Set your master password. This is the one password you memorize. Make it long — a little sentence works better than a word with symbols jammed in. Something like "myoldtruckhates2ndstreet" beats "Tr0ck!99" and it's easier to remember. Write this ONE password down somewhere physical and put it somewhere safe, just this once, while it's brand new. Not a sticky note on the monitor — a drawer, a safe, wherever you keep important paper. After the first week or two you won't need the paper anymore, but don't rely purely on memory on day one.
- Add your accounts one at a time. Start with email, banking, and anything with your kids' school stuff. Don't try to do all 40 accounts you have today — that's how people quit in week one. Just today's few.
- Let it generate new passwords going forward. When you're logging into something and it offers to "generate a strong password," say yes. You'll never type it, never need to remember it. The manager remembers it for you.
Does that make sense so far... I know step two feels like the scary one. It's really the only step where you're doing anything by memory. Everything after that, the app carries.
One real caution here, not a scary one, just a true one: don't set up a password manager and then immediately go changing a bunch of old passwords before you've saved the new manager on your phone too, not just your laptop. I locked myself out of an account once because I changed the password and then closed the tab before saving it — turned it off between the change and the save. Took forty minutes to sort out. So: save first, then change. Every time.
A word about "but I have so many accounts, this feels like too much"
I hear this a lot. My answer's always the same one I give about files — you don't have to fix everything today. A neighbor of mine kept every email since 2009 because "you never know." I didn't make her delete a thing. We didn't sort seventeen years of email either. We just built a way to search it that actually worked, and she can find what she needs now, which was the actual problem the whole time. Passwords are the same. You don't need all 40 accounts moved in today. You need a home for the ones you use most, and a system that catches the rest as you go.
Before next time
Get your password manager installed and your master password set, and move over at least three accounts — email first. That's genuinely enough for one week. 👍🌞