Up to 16 chars. Letters, numbers, . _ - only.

8 chars minimum. We don't enforce complexity, that's on you.