The length of the password should be at least 8 characters.
The strength increases with the length, a longer password should have more points.
Include special characters like #/" and the like. (Or just any other than [a-Z0-9])
For really long passwords this method could get slow. Why don't you just test every new character and use a dictionary for which features the password already has.