Private by default. Publish only when you choose.
Use at least 8 characters. No special characters required.