Does it have to be a 4-digit PIN to protect my credential?

No. The LoginTC administrator can configure the strength of the PIN or passcode required to unlock the token in the app. When your LoginTC Administrator configures a domain in LoginTC Admin, she can select if the token is a 4-digit PIN or if a passcode is required with a minimum length.