Used in links and by the API. Lowercase letters, digits, - and _. It must be unique and can't be changed later.
Outside the US and Canada, start with + and your country code.
At least 12 characters, with an uppercase letter, a lowercase letter and a number. You'll set up an authenticator app (MFA) the first time you sign in.