Use at least 10 characters (up to 72 UTF-8 bytes). Resetting your password signs out existing sessions.