Passwords must be at least 8 characters long and contain characters from three of the four following groups: lowercase letters, uppercase letters, special characters (! @ # $ % etc.), and numbers. You may not enter a previously-used password. Passwords will expire after 365 days.