Takes under a minute.
Password guidelines
Avoid common passwords — ones found in past data leaks are rejected.