Alright, you understand the three-layer system. Now let's actually build it.
This is where most password books lose people. They give you theory but not practice. Not here. I'm going to walk you through exactly what to do, step by step, like I'm sitting right beside you.
The Password Audit Weekend
Mark your calendar. This coming weekend, you're going to fix your password situation once and for all. Not perfect it—fix it. There's a difference.
Here's what you'll need: - 4-6 hours total (split across two days) - A notepad or computer document - Your phone - Access to your email - Coffee (or beverage of choice) - Patience with yourself
That's it. No special software yet. No credit card required. Just you and a decision to finally handle this.
Saturday Morning: The Great Discovery
Time: 2 hours
Hour 1: The Account Hunt
Pour your coffee and open your email. We're going hunting for accounts you've forgotten.
Search your email for these terms: - "Welcome to" - "Confirm your account" - "Password reset" - "Your order" - "Subscription" - "Thank you for joining"
Write down every account you find. Yes, even that pottery forum from 2012.
Next, check: - Your browser's saved passwords - Your phone's saved passwords - Credit card statements (last 3 months) - That notebook where you write passwords - Sticky notes (be honest) - Old phones and tablets
Jennifer discovered 147 accounts in her email. "I had no idea," she said. "Accounts for stores that closed. Services I tried once. Three different accounts for the same site."
Hour 2: The Sort
Remember our three categories? Time to use them. Go through your list and mark each account: - FK = Fort Knox - GL = Good Locks - BS = Basic Security
Don't overthink. First instinct is usually right. When in doubt, bump it up a category.
Reality Check Questions: - Do you have 5-10 accounts marked FK? (Too many = unmaintainable, too few = under-secured) - Are your financial accounts in Fort Knox? - Is your primary email in Fort Knox? - Are abandoned accounts in Basic Security?
Saturday Afternoon: The Core Four Technique
Time: 1 hour
Here's the secret to Fort Knox passwords: You only need to memorize 4-5 base passwords. Not 10 unique random strings. Just 4-5 memorable bases that you'll modify slightly for each account.
Creating Your Core Four
Think of four different password bases using these methods:
Method 1: The Sentence System Take a meaningful sentence and use the first letter of each word.
Example: "I met my wife Noor at a coffee shop in Denver 2009" Becomes: ImmwSaacsiD2009
Method 2: The Story Blend Combine elements from different parts of your life.
Example: Your first car (Civic) + Your honeymoon place (Maui) + Year married (2015) Becomes: Civic#Maui#2015
Method 3: The Phrase Twist Take a phrase you'll remember and intentionally misspell it.
Example: "Coffee makes me happy" Becomes: K0ff33Mak3zMeeHappy
Method 4: The Personal Algorithm Create your own consistent pattern.
Example: Site name (first 3 letters) + birth month + ! + childhood pet + last 2 of year born Amazon becomes: Ama07!Fluffy82
Your Core Four Assignment: Create four different base passwords now. Rules: - At least 12 characters each - Mix of uppercase, lowercase, numbers - Include at least one symbol - Based on things meaningful to you - NOT using dictionary words alone - NOT using public information (birthdays on Facebook)
The Modification Method
Here's where it gets clever. You'll use your Core Four as bases, then modify them slightly for each Fort Knox account:
Email: Core1 + Email Bank: Core2 + Bank Work: Core3 + Work
Robert's example: - Base: ImmwSaacsiD2009 - Email version: ImmwSaacsiD2009#Gmail - Bank version: ImmwSaacsiD2009#Chase - Work version: ImmwSaacsiD2009#IBM
The base is memorable. The modification is logical. Your brain can handle this.
Sunday Morning: Setting Up Your System
Time: 2 hours
Hour 1: Securing Fort Knox
Log into each Fort Knox account and update the password using your Core Four system. As you do:
1. Enable two‑factor authentication (2FA) (we'll cover this in detail in Chapter 9) 2. Update recovery options (phone number, backup email) 3. Check security questions (make sure you'll remember the answers) 4. Review connected apps (remove any you don't recognize)
The Physical Backup
Yes, you're going to write these down. The security experts will gasp, but here's the reality: A properly secured physical backup beats a forgotten password every time.
Get a small notebook. Write: - Account name - Username/email used - Password hint (NOT the full password) - Recovery phone/email - Date last updated
Example: "Gmail - personal Noor.johnson@ Sentence + provider Recovery: 555-0123 Updated: Jan 2024"
Put this notebook in a fireproof safe, safety deposit box, or other secure location. Tell ONE trusted person where it is.
Hour 2: Organizing Good Locks
For Good Locks accounts, you'll create category-based passwords. Pick 3-4 categories:
Financial Services: BasePassword + Fin + [specific] Example: CoffeeLover2020+Fin+PayPal
Shopping Sites: BasePassword + Shop + [specific] Example: MountainHiker99+Shop+Amazon
Social Media: BasePassword + Soc + [specific] Example: BeachDreamer23+Soc+Facebook
Utilities: BasePassword + Util + [specific] Example: GreenThumb88+Util+Electric
The pattern is memorable. The categories make sense. You're not memorizing 30 passwords—you're memorizing 4 patterns.
Sunday Afternoon: The Finishing Touches
Time: 1 hour
The Emergency Access Plan
Create an "Emergency Access" document. This is NOT all your passwords. It's instructions for your trusted person to access critical accounts if needed.
Include: - Location of password notebook - Your Fort Knox account list (just names, not passwords) - How to request access (death certificates, power of attorney, etc.) - Important contacts (lawyer, financial advisor, etc.) - Any special instructions
Lisa's emergency document fits on one page. It starts: "If you're reading this, something has happened to me. Don't panic. Here's what you need to know..."
The Family Meeting Script
If you have a spouse/partner, have this conversation:
"I've organized our password system for emergencies. I'm not sharing everything—we both need some privacy. But if something happens to me, you can access what you need. Here's where to find the emergency document..."
This isn't about trust. It's about preparation.
The Maintenance Schedule
Put these in your calendar now: - Monthly: 15-minute password check (first Sunday) - Quarterly: Update any changed passwords in your notebook - Annually: Full security review
That's it. Not daily. Not weekly. Monthly maintenance keeps the system running.
Common Setup Mistakes (And How to Avoid Them)
Mistake: Trying to Update Everything at Once David tried to update all 100+ passwords in one day. By account #30, he was exhausted and making mistakes.
Solution: Focus on Fort Knox first. Good Locks can wait a week. Basic Security can wait a month.
Mistake: Creating Passwords You Can't Remember Emma created "perfect" passwords like "x#K9$mP2@vN!qR". Two days later, she couldn't log into anything.
Solution: Use the Core Four system. Memorable beats random.
Mistake: Not Testing Recovery Methods James updated all his passwords but didn't check recovery options. When he lost his phone, he couldn't receive two-factor codes.
Solution: Test each recovery method. Send a code. Make sure it arrives.
Mistake: Hiding Backups Too Well Margaret hid her password notebook so well that she couldn't find it six months later.
Solution: Secure but accessible. Tell someone you trust where it is.
Your Setup Checklist
Print this out. Check off each item as you complete it:
Saturday Morning: - [ ] Hunt for all accounts (email, browser, statements) - [ ] Create master list - [ ] Sort into three categories - [ ] Verify Fort Knox has 5-10 accounts
Saturday Afternoon: - [ ] Create Core Four base passwords - [ ] Write them down securely - [ ] Practice modifying them - [ ] Test that you can remember them
Sunday Morning: - [ ] Update all Fort Knox passwords - [ ] Enable two‑factor authentication (2FA) - [ ] Update recovery options - [ ] Create physical backup notebook - [ ] Secure notebook properly
Sunday Afternoon: - [ ] Create Good Locks category passwords - [ ] Update most important Good Locks accounts - [ ] Create Emergency Access document - [ ] Have family conversation - [ ] Schedule maintenance reminders
The Emotional Journey
Fair warning: This process will stir up feelings.
Hour 1: Excitement. "I'm finally doing this!" Hour 2: Overwhelm. "I have HOW many accounts?" Hour 3: Frustration. "This site won't let me use symbols!" Hour 4: Tedium. "Do I really need this account?" Hour 5: Pride. "Look at my organized Fort Knox!" Hour 6: Relief. "It's done. It's actually done."
All of these feelings are normal. Push through. The relief at the end is worth it.
Quick Win Box
The Password Manager Question
People always ask: "Should I use a password manager?"
Short answer: Eventually, probably yes. But not this weekend.
This weekend is about building a system that works without any special tools. Once that's working, you can add a password manager to make it even easier. We'll cover this in detail in Chapter 9.
For now, focus on the Core Four system. It works without any apps, subscriptions, or technical knowledge.
Real Life Sidebar: Ahmed's Story
Ahmed tried three different password managers before admitting they stressed him out more than helped. "I kept worrying: What if the app goes out of business? What if I forget the master password? What if it gets hacked?"
He uses our manual system now. "It's not as automated," he says, "but I understand it. I control it. And I can access my accounts from any computer without needing special software."
There's no shame in choosing the system that works for your brain.
The Monday Morning Test
Monday morning, you'll wake up with an organized password system. Test it:
1. Can you log into your email without checking notes? 2. Can you remember your bank password? 3. Do you know where your backup notebook is? 4. Could your spouse find your Emergency Access document?
If you can answer yes to all four, congratulations. You've just solved your password crisis.
If not, don't panic. Review your Core Four. Adjust what's not working. This is a practice, not a test.
Remember Jennifer from Chapter 1? She scored 186 on the password stress quiz. After her setup weekend, she texted me: "I just logged into my bank account from memory. First time in five years I didn't have to reset the password. I might actually cry."
That could be you next Monday.
---