Notice the color bar below the password field, indicating the approximate strength of the password. It's up to you to decide how strong you want the password to be.
However, eventually, we will impose **restrictions** on users who have a **weak password** (e.g. they will not be allowed to be project managers). In fact, we **always** consider passwords entered here to be **weak**, because **shared passwords** are inherently more vulnerable.