Create Complex password:
Password must meet complexity requirements (Windows 10) - Windows security | Microsoft Docs
Require multi-factor authentication (MFA) The most important thing you can do to protect your organization is to require MFA for users to log in to O365.