Keep it simple and not personal — this just makes sure the right person is on the right account, it doesn't protect anything sensitive. Don't reuse a password you use elsewhere.