At least 15 characters. Spaces and long passphrases are welcome; no symbols or capitals required. Password managers and pasting work.