When choosing passwords, employees should be required to use a combination of upper- and lower-case letters, numbers, and special characters. Passwords should also be long (at least 12 characters), avoid words found in the dictionary, not reuse passwords across different accounts, and regularly change them. Password managers can help employees easily manage their passwords without remembering them all.