Charts, sync and ripping run on the server, so they need an account.
At least 10 characters. Length is what makes a password hard to guess — a long phrase beats a short one with symbols in it.