At least 8 characters. Changing it signs out every other device.
Forgotten it instead? Sign out and use Reset with a code from the commissioner.