Finally the guidelines about passwords that made me crazy - change every 90 days, include an upper case, lower case, number and other character - are being changed as we see in this NPR article.
Forget Tough Passwords: New Guidelines Make It Simple
I'd often thought it couldn't be terribly secure if we had to write it down to remember it. Of course, I find the best solution is still a password manager.
Here's some information and a review of some of the best rated ones from PC Magazine:
The Best Password Managers of 2017
I use LastPass and have generally been quite happy with it but it can be a challenge to use with mobile apps and sites.