I like to type out a random set of numbers and letters and save them to a notepad. It's the best defense against brute force attacks. The bitcointalk hack that happened in 2015 wouldn't have been a problem for anyone if their passwords were good because all the passwords needed to be bruteforced.