Salt & Pepper Password Method

A simple, unbreakable system for physical password notebooks


Writing down full passwords in plain text is risky. Relying on simple, repeated passwords is far worse. This guide uses a two-piece key system: your notebook holds the scaffolding, but your memory holds the secret key. Even if someone picks up your notebook, the entries are completely useless to them without the key inside your head.


Step 1:  The Salt - Create Your Secret Key

Choose a master phrase or pattern that you never write down anywhere.

Pro-Tip (The Song Technique): Take the first letters of the first 5 to 7 words of a popular song you know by heart, but rarely or never actually sing aloud. Mix in a number and a symbol to make it complex yet effortless to remember.

Example: "Sweet Caroline good times never seemed so good" → SCgtnssg

Add a favorite number and symbol → SCgtn!88 (This is your unwritten Salt).


Step 2:  The Pepper - Create the Account Variable

For each service or website, create a unique word, phrase, or association. Write only this part in the notebook.


Step 3: Establish Your Combination Rule

Pick a single combining rule that applies to every account. 

Never record this rule in the book.



Rule Style: Secret Salt 

Previx is In Your Head

SCgtn!88


Pepper

Suffex is a Notebook Entry

SilverCoin


Actual Typed Password

Prefix

SCgtn!88SilverCoin



What Your Notebook Actually Looks Like

Anyone looking over your shoulder or browsing the physical pages only sees innocent, unconnected words:


[Service / Site]

[Username / Email]

[Written Password Clue]

[Notes]

 

Chase Bank

jane.doe88@email.com

SilverCoin

App MFA enabled


Amazon

jane.doe88@email.com

BoxOnPorch

Updated Aug 2026


Netflix

family_stream@email.com

CouchPopcorn

Living room TV profile


Golden Rules of Physical Security

Never write down the Salt or the combination rule. Commit both entirely to memory.

Keep the notebook in a designated private place. Store it inside a desk drawer, cabinet, or safe—never left wide open on a tabletop.

Always enable Multi-Factor Authentication (MFA). Whenever supported, activate push notifications or authenticator app codes for high-value accounts.