At least 8 characters. Use a passphrase or mix of words for best security. Avoid common passwords.