Use 15–128 characters. A long, unique passphrase works well.

Eligible new users receive 50 welcome credits after verification, valid for 30 days. One welcome reward per browser every 90 days; review may apply.