How safe is your password?

My 4 Simple rules

1. Always 22+ characters, alphanumeric/caps/specialsymbols, all trully random

2. Always 2FA. Youbikey, AEGIS , GoogleAUTH or at least a SMS

3. Never the same password on 2 or more different places

4. Do not trust any device, which is online. Trust paper, trust onetimepassword - if you really need to trust in smb