Public profile handle and @name. Choose a username—not your email address—because this can be used to find your profile. Letters, numbers, underscores, and hyphens only.

Private sign-in and recovery email. It is kept separate from your public username.

Use at least 15 characters and at most 72 UTF-8 bytes. Avoid common passwords; choose a unique passphrase or use a password manager. Accents and emoji use multiple bytes.