I know, it’s hard to do somethings right. I also know there’s a lot of bad advice out there. This is pretty good though, for now. One of the problems with security is that as soon as a method becomes popular, it becomes a target for the bad guys/gals/ones.
Some of these points will (famous last words) remain relevant until passowrds become a thing of the past.