Don't tell anyone your password. ... Depending on the sensitivity of the information being protected, you should change your passwords periodically, and avoid reusing a password for at least one year. Do use at least eight characters of lowercase and uppercase letters, numbers, and symbols in your password.