I think the generator from xkcd sounds pretty good. https://xkcd.com/936/
Note that this advice is for the average, common site. If you have special considerations for your bank, broker, or similarly high-value sites, different advice might apply of course (but this is not really the place for that and there are already enough recommendations online).
I wonder which way round is actually the right way to say it?