Sign-ups are invitation-only while the app is in private use.
At least 12 characters. A password manager is a good idea.