3 to 20 characters. Letters, numbers, spaces, dashes and underscores.

At least 8 characters.

There is no password reset yet, so leaving this blank means losing the password loses the account.