At least 8 characters. Avoid common or breached passwords.
Applied automatically after you confirm your email.