Rule of thumb: If you ever have the urge to go “Heh,” after choosing a password, it’s a bad password.