START HERE
A password should protect one account,not connect ten of them.
Most password advice focuses on complexity. Length matters. Randomness matters. But the bigger problem is often reuse.
If the same password protects your email, work account and a few personal sites, those accounts now share the same point of failure. A password is strongest when compromising it tells an attacker nothing useful about your other accounts.