From Neal O’Farrell at the Identity Theft Council.
He suggest creating a use a passphrase.
A passphrase is a short sentence that’s easy for you to remember – that describes something about you and your life. Something that a hacker would have a very hard time knowing or guessing.
For example, the phrase could be something like “I graduated from Notre Dame University on June 1st 2002.” Pick the first letter from every word in that phrase, making sure you include the upper and lower case, and keep all the numbers.
That would give you the following password: “IgfNDUoJ1st2002” That’s a massive 15 characters and includes upper and lower case letters and numbers. Change the “I” to the symbol “!” and now you’ve made it even harder to crack.