We just updated the password advice we give to WordPress.com users so that it focuses on modern techniques like password managers and passphrases. It’s aimed at non-technical users, and very little of it is specific to WordPress.com, so it’s a good resource to share with clients or friends who could use a little nudge towards improving their security.