At least 12 characters. Best: a long random password from your password manager.
Registration is invite-only for now. The code is a temporary protection against unauthorized access.