...
- Make passwords at least eight characters long (twelve or more is preferred)
- Don't use a user name, a real name or company name
- Don't use a singe dictionary word (even slang and foreign languages); a multi-word phrase is much better
- Don't use phone numbers, Social Security numbers, license plates or birthdates
- It should be significantly different from previous passwords
- It should contain characters from each of the following groups:
- Uppercase and lowercase letters
- Numbers
- Symbols (!,@, #, $, %, etc.)
- Don't use the same password for multiple accounts (e.g., Swarthmore, Amazon, Gmail, etc.)
...