To move away from "hot" passwords and protect against the 19 billion compromised credentials, security experts recommend an exclusive, unique approach to every account. Microsoft Support Complexity: A strong, "exclusive" password should be at least 12 to 14 characters The "8-4" Guideline:
: Always turn on two-step verification where available to provide a second layer of defense even if a password is leaked.