- Minimum length of nine (9) characters
- At least 1 letter capitalized
- At least 1 letter lowercase
- At least 1 number
- Passwords will expire 180 days after each change
- Passwords are case-sensitive (Capital is different than capital)
- Passwords cannot be one of your last six (6) passwords used
- Passwords cannot change more than once in a 24 hour period
- Passwords cannot be too similar e.g. "password1", "password2" (help)
- Passwords cannot contain portions of your user or Display Name (help)
- Passwords cannot be common; as in found on compromised lists (help)
- Avoid the following characters: @ % & ? / \ + , (help)