3-20 characters, letters, numbers and underscore only. You can change it once per week in total, across web and the app.