Before we do that, let's discuss the importance of passwords. It doesn't do much good to set up a password and then write it down and place the password in your desk drawer or on a sticky note pasted to your computer screen. Also, don't choose the obvious for your password. Anyone attempting to hack into your account or into the web server would start with your spouse's name, your kid's names, pets, cars, street address, etc. Next, they would try spelling this backwards.
Acronyms are the best.
I t's F riday. Passwords should also be changed routinely. Set a policy that every three months or so you will change the server password. Obviously there may come a time when you will need to change it more often. If an employee resigns or is terminated, the password should be changed.