Must be at least 8 characters long

Should not be similar to personal information

Should not be a commonly used password

Cannot be entirely numeric

Passwords must match