Password Risk Management

Google has some good advice on passwords.



http://gmailblog.blogspot.com/2009/10/choosing-smart-password.html