how do i choose a password?

and how many do i need? i.e. should i use the same one for disk encryption as for email as for root password as for password store key, or have a separate one for each?

should i change passwords every so often?