Passwords should be long, unique, and randomly generated. For password-based authentication systems, a password manager is a good way to generate and store secure passwords.