Password must be at least 8 characters, not entirely numeric, and not too similar to your name or email.

PIN must be exactly 6 digits. You’ll use this for sensitive actions.