Instead of better passwords the first step should be, that the name of the admin account is NOT shown anywhere in the source code anymore! My admin name is probably as strong as other peoples' passwords. But then (if you post as admin) you get on top of each post a line with the "entry-author", which in source code displays a link to the name of the admin account! I deleted the corresponding line of code from my theme...