A password should be at least 8 characters long, but 12 or more characters is better.