I think it has to be over 21 characters but no other requirements. They say it's easier to remember so people don't write it down everywhere and harder to figure out because if the number of characters