Setting your new password requires the following:
Password Length:
must be at least 8 characters.
Password Complexity:
must include three out of the following four categories, uppercase letters (A-Z), lowercase letters (a-z), base 10 digits (0-9), or non-alphabetic (!, $, #, %). It cannot be any combination of your birth name or userid. A sentence can serve as a password, these are often called passphrases and are typically easier to remember.
Password Lifecycle: passwords will be good for one year (365 days), after which they will need to be changed. Passwords cannot be reused until after 10 password changes.
Password Storage
: passwords are to be used and stored in a secure manner, passwords are not to be written down or stored electronically unless in a program specifically designed for securing passwords and in of itself protected with a password.