Do not use a word that can be found in a dictionary (even foreign).
Do not make your password obvious. It should not contain any form of your name or User ID, and don't use obvious words such as "password," "guest," "user" or "admin."
Do not use personal information, such as family members or pets names, your date of birth, social security number or other similar information. Since such information may be public, you should not use it in a password, even in combination with other characters.
Do not use common words or acronyms; spelled forwards or backwards.
Avoid using password-saving features, such as Microsoft's Auto Complete feature.
Password Dos
Change your password immediately if you believe there is any chance your password has been compromised.
Log off your computer before leaving work at the end of the day.
Lock your keyboard if you leave your computer, even if only for a few minutes.
Change your password early in the week. Changing it on a Friday or before a vacation will make it harder to remember upon your return.
Change your password if someone on your team or in your area is suddenly put on disciplinary leave or fired.
