...
- Be at least 12 characters long (However, more is better)
- Case sensitive (Meaning should have UPPER and lower case letters)
- Contains a mixture of letters and numbers
- Contains symbols (Such as #, ! and so forth...)
- Does not use words found in any dictionary (Such as names or words)
- Does not use letters or numbers in sequence or in repeated fashion (Like 1111, 1234, abcd)
- Using a password that contains public knowledge information related to you (Such as your address and the like.)
(Reference: Password Management on UCSB Information Security)
...