According to the National Institute of Standards and Technology, a secure password should be at least 8 characters long and use all available types of characters (lower and upper-case letters, numbers, and special characters).