Here's a hint: don't use the word "password" or other common phrases. We tell you what cybersecurity experts suggest.