He recommended not using emojis that could “give you away” — such as frequently used emoticons — and encouraged adding one or two emojis to a traditional alphanumeric password.