Passwords must be at least 8 characters. It is good practice to use a combination of letters, numbers and punctuation marks.