All of them, in one go. Capitals, accents, punctuation and spaces do not matter. 3 wrong tries lock this for 24 hours, and every attempt alerts your phone and email.
Afterwards, add a new Face ID / Windows Hello on the Security tab. Back to sign-in