I use a passphrase which is about 25 words long and a sentence I invented, has a couple special characters and is easy for me to remember. I think this is generally accepted as a strong and secure method.