Track every league, every game.
3-24 characters. Letters, numbers, dots, dashes and underscores.
At least 6 characters. Common passwords are refused — three unrelated words with a number works well.