Thirty Days of Garbage Strings: What I Forgot, What the Machines Remembered

The rules were simple, which is the only kind of rule I ever break myself with.

For thirty days, every password on every account I touched would be generated by a little Python script I wrote in an evening. Sixteen characters, truly random, no substitutions, no birthdays, no band references. No mnemonics. No password manager autofill — that was the hard part, and honestly, the whole point. If I wanted to log in, I had to know the string, the way you know your own phone number from childhood, which I still do, which is its own kind of haunting.

I called the script entropy.sh because I have never once resisted a pun that requires a terminal.

Week One: The Honeymoon Phase of Forgetting

Day one went fine, which fooled me. The password for my email was 7Rq#mVx2pLw9Kd4t — I just typed it, and I want to be clear that I am not typing it correctly here because I have already forgotten it, which is the entire thesis of this article forming in real time.

The first three days felt almost virtuous. There's a certain clean feeling to a password that means nothing. It carries no baggage. It's not your dog. It's not the street you grew up on. It's just noise, and noise can't betray you.

By day four, I was standing in the checkout line at a grocery store in Ohio, phone in hand, staring at a login screen for a streaming service, and the string was simply gone. Not misplaced. Gone, like it had never existed. I locked myself out of an account I'd had since 2011 over a television show I wasn't even enjoying.

The Middle: Where It Got Interesting

Here's what nobody tells you about random strings: your brain doesn't file them. It refuses. Human memory is a meaning-making machine, and I was feeding it raw gravel twice a day and expecting it to build a cathedral.

But something strange happened around day nine. My fingers started remembering before I did. I'd open my laptop, go to type a password, and my hands would just... do it, while my conscious mind watched from the back seat. Motor memory doesn't care about meaning. It cares about repetition. My hands had opinions my brain couldn't access.

This felt profound for about two days, until I realized it also meant I could never tell anyone my passwords, including myself. I was a security system with no administrator.

The Lockout Diaries

A partial list of things I got locked out of in thirty days:

• My airline account, twice, once while standing at an airport counter
• A tax document portal, during the single worst possible week of the year
• My own website's admin panel, which is genuinely embarrassing to type
• A recipe website I don't remember creating an account for, and honestly, no great loss

Each lockout was a small moral event. The reset emails piled up like parking tickets. Somewhere around day seventeen I sat in a parking lot resetting my fifth password of the week and had a genuine crisis about what passwords are for.

What We Owe the Machines

Here's the confession at the center of this: the experiment didn't fail because random passwords are bad. It failed because the entire ritual is theater. I was performing security for an audience of login forms, and the cost of the performance was my actual life — the ten minutes here, the fifteen there, the slow erosion of the feeling that my digital self belongs to me.

A password manager would have solved this in an afternoon. I knew that going in. But I also know what it feels like to hand over the last piece of memorized selfhood to a piece of software, and I wanted to know exactly what I'd be giving up. Now I know: a lot of frustration, a little muscle memory, and the strange dignity of being the only person who knows my own name.

I lasted the full thirty days. On day thirty-one, I installed a password manager, imported everything, and let the machine remember for me. My master password is long, random, and — this is the compromise — built from a passphrase of nonsense words I can actually hold in my head. One door to remember instead of forty.

The script still lives in a folder on my desktop. Sometimes I run it just to look at the output, these beautiful meaningless strings, like snow that nobody will ever shovel. They're the most honest passwords I've ever made. That was the problem.