At least 8 characters (12 if your company doesn't require two-step sign-in). Don't include Vigil, your company name or your email name.