At least 16 characters. A sentence you will remember, such as four unrelated words, is easier to type and harder to guess than a short password full of symbols.