Choose length over clever tricks
Create a long phrase using several unrelated words that you can picture. Do not use names, birthdays, addresses, or an example copied from this page.
Use a different password everywhere
A stolen password becomes much more dangerous when it also opens your email, shopping, and banking accounts. A reputable password manager can create and store unique passwords for you.
Turn on two-step verification
Enable two-factor authentication, preferably with an authenticator app or security key when available. Never tell anyone a verification code they unexpectedly asked you to provide.