My tip: mix languages. Defeats dictionary attacks. Hello28Adios@ for example. English word. Number. Spanish word. Symbol.

Next level is to still use a capital letter but not the first letter. Or the last. So then you have heLlo23aDios@ — much much much more secure.