At least 12 characters. A short sentence beats a short password.
Two fields now, one repository next. The first 100 accounts are open.