• Must be a minimum of 8 characters – but it can be more

     • Must include at least one number

     • Must include one upper case letter

     • Must include one lower case letter

     • CANNOT include the user’s account name or parts of the user’s name that exceed two consecutive characters

     • Additionally, passwords appearing on the "Bad Password" list will be rejected