Two-factor Authentication (2FA) tries to overcome weaknesses of just one way of identifying yourself by requiring two components that operate independently and avoid a common point of compromise. This could be something physical that you have (A specific phone) and something that you know (A password).

There are many ways that a criminal might get your password including gathering enough information about you to guess your password; tricking you into revealing your usernames and/or password; capturing your passwords directly, e.g., by looking over your shoulder or with spyware; cracking passwords using a software program that makes many guesses; and capturing usernames and passwords from a service provider, so they can attempt access at another service

A password that uses many types of letters and characters, does not already exist, will not be created by someone else and is long is the best password provided that it is able to be remembered and can be typed in reliably.

Mnemonics is a method to help create a strong password that is memorable. You can use this to your advantage by systematically abbreviating a memorable phrase to create a password.

The Diceware method uses dice and a list of words to come up with a truly random collection of words to make a passphrase. The randomness of the phrase makes it hard to guess as it defies standard syntax and grammar rules.

Password managers are programs that manage your passwords for you. They do this by using one password to gain access to all of your passwords or by using an easy-to-remember password to unlock a stronger password.