Your password must be at least 12 characters and combine an uppercase letter, a lowercase letter, a number, and a special character — all four are required without exception, whether creating your account or changing your password later.
After entering the correct password, a mandatory two-factor verification (2FA) step is required for every account without exception — a 6-digit code is sent to your registered email, valid for only five minutes. This step cannot currently be disabled; it's a standing protection applied to every login to keep your account safe even if someone learns your password.
If the verification code doesn't arrive, check your spam folder, and make sure your registered email is correct and still accessible to you.