How to choose a password that I have to remember for a long time but do not use a lot
Likely the best option in this kind of scenario is to record the password/passphrase in a physically secure location (e.g. bank vault, safe deposit box).
Relying on human memory to record this kind of information for 10+ years is an extremely bad idea. For example the person who knows the passphrase leaves the comapny/gets hit by a bus/forgets it.
Writing it down and storing it in (preferably 2+) secure location avoids this kind of issue.
I use the following system:
Hash a string of these three parts
- A fixed, long and impossible to guess prefix (I diceware'd a 10-word phrase)
- The current date to the precision that you can easily recall/depending on the frequency you change it (e.g. use year only if changed once every few years in case you forget the month)
- An intuitive and succinct description of the purpose of the password (e.g. domain name of the website or a single word like "DR")
Use this pattern to generate all your passwords so you'll never forget the fixed prefix. Parts 2 and 3 prevent collision so if any password is revealed, you don't have to remember a new prefix (and then forget the old one by mistake).