strong password, password length, complexity, unique password, character types, randomness, passphrase, password manager, no personal information, phishing resistance