Your password should be at least 20 characters long. Remember that attacks can also come from your direct environment. For example, if partners access your device unintentionally. Passwords are always better than unlock patterns as they can be easily observed.