The longer, the better.

https://digg.com/technology/link/how-long-it-would-take-a-hacker-to-brute-force-your-password-in-2022-ranked-8KVv28GW6H