Loading…
At least 12 characters. It cannot contain your name or email, and cannot be one of the passwords attackers try first.
This password is shown once and is not stored anywhere it can be read back. Send it to them over something other than email, and have them change it on first sign-in.