Why passwords feel harder as life gets more complicated

Many older adults quietly juggle passwords for:

• Banking and savings.
• NHS App and GP online services.
• Utility bills and council services.
• Shopping sites, email and messaging apps.

At the same time, you may be:

• Managing long-term health conditions or caring for someone else.
• Dealing with tiredness, pain, memory changes or worry.
• Trying to follow advice that seems designed for young, tech-confident people.

A helpful way to think about passwords is this:
“Passwords are keys. My brain is a home, not a keyring.”

The aim is not to stuff every key into your memory. It is to build a small, safe system around you so that your brain can focus on health, relationships and daily life, while the system helps you remember codes.

The “traffic light” rule for personal information

Before we talk about passwords, it helps to sort information into three simple colours:

• Green – everyday information: first name, general interests, town or city, favourite football team. Often safe to share in conversations and simple accounts.
• Amber – personal details: full name, date of birth, address, NHS number, GP surgery, regular medicines. Share carefully, usually only with trusted services.
• Red – security secrets: passwords, PINs, card security codes, online banking logins, one-time codes, full security answers. Never share these in response to emails, texts or unexpected calls.

A simple phrase you can keep by the phone or computer:
“Green is chat, amber needs care, red never travels.”

Even when you do write some things down (we will come to that), your “red” information needs extra protection – just like you would not leave your front door key on your outside windowsill.

Paper, memory or apps? Choosing the right mix for you

There is no single perfect way to store passwords for everyone. Instead, think about three “rings” of support:

• Ring 1 – The brain ring: a handful of passwords you keep in your head – for example the code to unlock your phone or tablet, and perhaps one main email account.
• Ring 2 – The paper ring: a small, organised notebook or card stored in a safe place at home, with written hints or partial passwords.
• Ring 3 – The digital ring: secure password tools, browser password storage, or a password manager app if recommended by someone you trust and you feel comfortable using it.

For many older adults, the safest and most realistic starting point is a strong brain ring for the most critical codes and a carefully protected paper ring for the rest.

Creating a safe password notebook (without leaving a “treasure map” for thieves)

Writing things down at home is not automatically unsafe. The risk comes when notebooks are:

• Left in obvious places (on the fridge, with “PASSWORDS” written on the front).
• Carried everywhere in handbags or wallets that could be lost.
• Shared freely with visitors or helpers you do not know well.

A safer paper system could look like:

• One small notebook or card kept in a drawer or box away from front doors and windows.
• Plain cover with a neutral label such as “Household list” rather than “Passwords”.
• Entries that combine hints and information – enough that you can remember the full password, but not enough for a stranger to use easily on their own.

For example, instead of writing:
“Bank: username FJADD, password Rosebank12!” you might write:
“Bank: user FJ + 5 letters, pass = favourite street + year of wedding.”

The notebook still relies on your memory for the final piece, but it reduces the strain.

Designing passwords your future self can still use

Many password rules ignore ageing, fatigue and illness. As we grow older, it is wise to design passwords that are:

• Long but meaningful: easier to recall phrases than random strings – for example “TeaAt7WithSugar!” rather than “x3Qp9Z*”.
• Adaptable: a base phrase that you can adjust slightly for different sites (for example by adding the first or last letters of the service).
• Finger-friendly: avoid tiny keys, overly complex symbols or patterns that are hard to type if you have arthritis or tremor.

You might choose a base phrase about something steady in your life – a favourite line from a hymn, song or proverb, or a memory that still makes you smile – and then add small markers so each service is unique.

The key is to avoid having one identical password for every important service, while still respecting your future brain and hands.

Two-step checks – why those extra codes matter

Many services (banks, email providers, the NHS App) now use an extra layer of security: a code sent to your phone, email or an authenticator app. This is sometimes called “two-factor” or “two-step” verification.

For older adults, this can feel annoying – “another code to type in!” – but it has a quiet benefit:
Even if someone guesses or steals a password, they still need the extra code.

To make this easier:

• Decide which device will normally receive codes (for example your main mobile phone).
• Practise reading a code slowly out loud, then typing it in – this links your eyes, voice and hands.
• Write a note in your password notebook such as: “Bank sends code by text – keep phone nearby.”

If you share care with a trusted relative, talk with your bank or service about options for adding an authorised person or a way to access codes if you are admitted to hospital or lose your phone.

When is it safe to share information – and when is it not?

Some organisations need certain information to help you safely:

• Your GP surgery may ask for date of birth and address to confirm your identity.
• Your bank may ask for parts of a memorable word or selected digits of a PIN – but not the whole thing at once.
• Trusted carers or relatives may need enough information to support you with online forms, prescriptions or appointments.

But there are some lines that should not be crossed. A simple rule:
Real services do not ask you to move money to a new “safe account” or to tell them your full password, PIN or one-time code.

If you are ever unsure:

• End the call or close the message calmly.
• Use a trusted phone number (printed on your card, letter or official website) to contact the organisation yourself.
• Ask a family member, friend or support worker to look at the message with you before you respond.

You can link this with our guide on Protecting yourself from online scams and fake messages.

Sharing control with family or carers – without losing your voice

As life and health become more complex, many older adults want help managing online accounts. This can work well – or create quiet frustration – depending on how it is done.

Rather than handing over all your passwords, it can help to:

• Decide which accounts you feel comfortable sharing direct access to (for example, utilities or online shopping) and which should remain more private (for example, email or personal notes).
• Ask your GP surgery or bank about formal ways to give someone limited access (proxy access, third-party mandates, lasting power of attorney, where appropriate).
• Agree a simple rule like: “Please tell me before you change any password, and write the new hint in my notebook.”

If you support someone else, you might find our guide on Helping older relatives use technology without taking over helpful.

Home safety and environment – where you store your “digital keys”

Because passwords live in tiny boxes on screens, we sometimes forget that home layout still matters. A few practical ideas:

• Keep password notebooks off the fridge. Choose a drawer or box that is easy for you to reach but not obvious to casual visitors.
• Avoid paper piles. If possible, keep one small folder for “important household information” instead of scattered notes in different rooms.
• Consider fire and flood. For critical documents (wills, power of attorney, account lists), a small fire-resistant box or safe may be worth discussing with family.
• Label gently. Instead of “BANK & PASSWORDS”, use neutral wording such as “Household records – do not remove”.

These choices protect not only your money and data, but also your future self – and any relatives who may one day need to help you manage things from your home.

When memory or health changes – noticing early warning signs

Struggling with passwords can sometimes be the first place people notice changes in thinking or memory. This does not automatically mean dementia; tiredness, pain, medication, low mood and stress can all make passwords feel impossible.

However, it is worth speaking to a health professional if you notice patterns such as:

• Frequently locking yourself out of accounts you used to manage easily.
• Repeatedly forgetting your phone or card PIN after years of using it.
• Getting lost while following simple on-screen steps that used to feel familiar.
• Finding it very hard to follow written instructions, even in good lighting with glasses on.

These are not reasons to feel ashamed. They are signals your brain may need extra support – just as breathlessness tells us the lungs need checking.

How PHAT fits into your safety and confidence plan

PHAT cannot see or manage your passwords, but we can support the whole person who is trying to live with them:

• Through our gentle Zoom exercise and education sessions, we help older adults practise using links, buttons and online tools in a calm environment.
• Our health blogs offer clear, grounded information you can trust, so you are less tempted to sign up for worrying websites that demand unnecessary personal details.
• We create spaces where older adults and carers can talk about digital worries – scams, passwords, NHS apps – without embarrassment, and turn that worry into practical steps.

The goal is not to become a computer expert. It is to feel that your money, your health information and your identity are not “up for grabs” to whoever sends the loudest message. Step by step, you can build a system that protects you and still feels human. 🌿