One of the most important things you can do for the security of your website (and your email, and your online banking... heck, just about everything you do online) is to choose a great password. What makes a password solid? Read on.

To prevent a malicious user from gaining access to everything you hold dear, your password should contain ALL of the following:

1. both numbers and letters, preferably mixed together
2. at least one capital letter (passwords are case sensitive)
3. at least one non-alphanumeric character (symbol)
4. a minimum of eight characters total

An example would be something like Ab&cd9eF -- except, of course, not in alphabetical order! This is the most secure type of password to guard against brute-force or dictionary attacks, where a computer tries common words and numbers until one "clicks".

One great way to come up with a complex yet memorable password is to use a fully punctuated sentence. Something like I love 2 eat apples! meets all four of the criteria above, and it is undoubtedly easier to remember than a random 20-character string.

You should NEVER do any of the following:

1. use your name or username for a password
2. use your address, telephone number, company name, child's name, or other known or easily-guessed information
3. continue to use a "default" development password once your site is live
4. store your password in a location where others can see it, like on your desk or monitor
5. use the same password for multiple accounts -- for instance, using the same password for your email that you use for your administrator account ensures that if someone finds out one of your passwords, none of your information is safe.

If you find your secure password difficult to remember, we recommend you write it down and store it someplace where it is not easily accessible, such as in a filing cabinet or locked drawer.