
If you have to use a password, to be safe, use a long password - and skip the nonsense about using special characters and changing it every three months.
Best would be to use a passkey. But even those will become vulnerable when quantum computing becomes robust enough to crack RSA, which will happen in the next two or three years. For now, it's the best we have.