Password complexity matters.
Don't use passwords that are easy to remember.
Use a password manager to automatically create long-phrase or complex passwords like:
This minimizes your risk of dictionary attacks, even with long-phrase common words. The random and long nature is hard to crack.