> For the complete documentation index, see [llms.txt](https://hash-mix.gitbook.io/cryptyfoundation/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hash-mix.gitbook.io/cryptyfoundation/block-3.-security/secure-ways-to-store-passwords/storing-passwords-in-your-head.md).

# Storing passwords in “your head”

Considered that all passwords are best to be kept in memory. But we strongly do not recommend remembering a couple of passwords and using them everywhere.

If your password is known on one site, the attacker will have access to all other sites with the same password

Using only one password is allowed on all resources, but subject to the presence of a secret. What if you add the first and last characters from the site address to this password at the beginning and at the end.

Using only one password is allowed on all resources, but subject to the presence of a “secret”. What if you add the first and last characters from the site address to this password at the beginning and at the end of your password.

![](https://miro.medium.com/max/1400/1*5TFutCL4LDUP5ZF_qaojLw.png)

For example, you have the password **lg65£GhiLg**, when you use it on Facebook, you add the first and the last letters of the site address after the first and before the last character of the password.

So, for **F**aceboo**k** you get the following password l**F**g65£GhiL**k**g.\
A little secret makes your password from your memory unique for each site.