At least 12 characters. A short phrase you can remember beats a clever short one — blue-crane-yard-2026 is far stronger than Xk9!q.

An operator can do all the payroll and procurement work. An admin can also add and remove people here. Give people their own account rather than sharing one — every edit is recorded against a name, and a shared login makes that worthless.