Locked out isn't locked for good.
Verify with your backup email and a saved recovery code to get back in safely.
At least 8 characters. Outgoing transfers pause for 72 hours after this.