Rules for strong passwords don't work, researchers find. Here's what does - CNET

In the name of cybersecurity, you can stop adding an exclamation mark to the end of your password.