Many cyber experts recommend that companies require employees to use passwords at least eight characters long. Some suggest passwords over 60 characters to guard highly sensitive data. Passwords should mix uppercase and lowercase letters, numbers, and characters.