Do not use the same password for everything as cybercriminals may know who you are and already know your password details;
Change your passwords periodically e.g. every three months;
Be aware that password hacking software automatically checks for common letter-to-symbol conversions, such as e.g. changing "and" to "&" or "to" to "2";
Use a combination of alphanumeric and special characters, not just the letters and characters you use or see most often.