3–32 letters, numbers or underscores.
Choose answers you both remember. Anyone who knows or guesses all three can reset your password. There is no other recovery method.
Capital letters and extra spaces do not matter. Keep spelling and punctuation the same.
At least 15 characters. A few words work well.