At least 10 characters. A passphrase of three or more uncommon words is the easiest way to get there - avoid your own name, your email address and anything you have used elsewhere.