Cybersecurity professionals recommend creating passwords that are at least 20 characters long, with a unique mix of letters, numbers and symbols. They also say you should never use the same password twice and update them every 90 days.