• Use at least 12–16 characters.
• Mix upper and lower case, numbers, and symbols, or use a long passphrase.
• Never reuse passwords across accounts.
• Use a password manager to generate and store them.

Enable two-factor authentication wherever possible for extra protection.