At least 8 characters, with letters and numbers.

Protected by two-factor verification & bank-grade encryption.