At least 6 characters. If you use symbols, prefer common punctuation (!@#$%&*); avoid spaces or unusual characters — password rules are enforced by the server and may reject some symbols.