A password should include a combination of letters, numbers, and characters. A password shouldn't be shared with any other account. A password shouldn't include any of the user's personal information like their address or phone number.