As a cybersecurity professional, I can tell you that password length is the #1 way to make sure passwords are secure. Also, Google Chrome has a built in "suggest a password feature" that's pretty useful, but the password it generates is too long to be used on your website.