And it only takes about 20 random ASCII characters to have a secure password. Being conservative, you should aim for 20 random ASCII characters, an English phrase with 128 characters or 10 randomly selected words from a large word list. In practice you can usually get away with less than this, but that is the goal to aim for and you don't want to have much less than that.