PGP uses a passphrase to protect your secret key. So how should you choose your passphrase? These links might help you.