At least 12 characters; avoid common passwords.
Email confirmation is temporarily disabled for access testing.