How do Japanese passwords work?

Is it hiragana only?

Could you just have a couple kanji as a password or is that not secure enough?