What is a good strategy for choosing account secret and password?

[drehb]

I’m also hoping for UFA.

Device management instead of passwords

Somewhat related: David said before that he is for some hardware controlled access to the network here I see that there is also an older thread on the forum about U2F / UFA