Maybe it is obvious, but good password is also a must. There are several list of common used passwords like here, here and here. I see every time unchanged/unset passwords or something obvious/easy to guess. I recommend some good system (like first letters of some poem or song - enhanced by...