Enter your email, one of your recovery codes and the new password. All open sessions will be closed.
At least 12 characters. A phrase of several words is best. It is never sent to the server: only a derived key is.