US-CERT, Choosing and Protecting Passwords (Security Tip ST04-002) (May 21, 2009) (full-text).
This advisory discusses how to choose and protect a password.