The FBI along with other security experts are now recommending a “pass phrase” rather than simply a password. Such a phrase should be relatively long – at least 15 characters.