From there, I can change my password and they recommend that I have 8-20 characters, with a mix of uppercase and lowercase letters, numbers and special characters.

FORBES: How To Protect Yourself From PayPal Identity Theft