An admin approves new accounts before they can log in.
At least 10 characters. A short phrase works well.