At least 12 characters. A short sentence you will remember works well. Changing it signs you out everywhere, then you sign in again with the new one.