At least 16 characters. Write it down and keep it somewhere safe. It cannot be reset or recovered.
Anyone holding this file and its passphrase can read it. Keep them apart.