3–20 chars, letters/numbers/underscore, must start with a letter. Email is optional — add it later for password recovery.

At least 6 characters.