Never use just a dictionary word, variant, or a recognizable pattern.
Use 3-4 character sets (lower case, upper case, numbers, symbols.)
Longer passwords are better, like 12 characters or more.
Don't reuse the same password on multiple sites.
Don't leave your password written down at your desk.