2. Use 12 or more characters, randomly generated, for best results.
3. Use 2FA whenever possible. Back up the code somewhere first, either take a picture of the code, or write down the characters.
4. Use a random looking username for login if allowed.
Examples of random passwords:
h9o4b6a3k7v3d0v0n5
c0e9s1b1b8g0n2r5g0
d2b6f7k2p5h6u4x4n1
t1g3r2n6s0p4h2k6q6
f5x0d9p7z3a8c2g0c6
o9m1f2h8l9n0l0m6p8
y0g1d4n5o5u0p8n6d0
b3h2l2q7d1d1l9v7z8
z6y4o7o3v9m6u1p1g2
j7j5d1t0i2u8u2d5n5
r8y7z7w1m8i9j3h1p6
c8p2y9r5s4z4z8l8l7
g3w5q4o8a6v6c7w5s7
r9p6a9y0y2m0q3z5v1
o9o9z8k8h6f5l1s0b8
q5h3k0j4u2z2q3z3h1
v6k1h1i2c8q1p3i4g9
r0b8i0c2y0j5p8p7x3
i0k8o2m0c1w8k1k7l2
e0w2g5w7t2y2s1q7a0
Depending on the website, you may be required to add UPPERCASE and lowercase as well as symbols, but if not I stick to just numbers and letters.
Agree with this!