At least 12 characters. Long passphrases beat short complex ones; the only rules enforced are length, a common-password blocklist, and not containing your email.
Already have an account?