Every year you can find published lists of commonly used passwords. Avoid those passwords. Hackers can brute force check those common passwords against accounts until one of them works.
For more helpful hints, purchase my ebook.
When You Don’t Differentiate…Your Password
Bredemarket 