Use 8+ characters. Avoid dictionary words, names, and passwords you've used elsewhere — a password manager can generate and remember a strong one for you.