At least 6 characters. Longer beats more punctuation.
No confirmation email — your account is ready to sign in with as soon as it's created.