• Passwords cannot contain the user’s account name or parts of the user’s full name that exceed two consecutive characters.
• Passwords must be at least 8 characters in length.
• You cannot reuse any of the last 24 passwords.
• Passwords must contain characters from three of the following four categories:
  • English uppercase characters (A through Z)
  • English lowercase characters (a through z)
  • Base 10 digits (0 through 9)
  • Non-alphabetic characters (for example, !, $, #, %)

Example:

A user’s name is Bob User. His account name is buser.

Bad Passwords for Bob:

• buser1 (has account name as part of password)
• user15 (has account name as part of password)
• jhuyuy (not enough characters; a minimum of 8 is required.)
• Agghuwep (no numbers; password must contain at least 1 number)

Good passwords for Bob:

• Apple2245 (at least 8 characters, at least 1 uppercase, at least 1 lowercase, at least 1 number)
• Apple224! (at least 8 characters, at least 1 uppercase, at least 1 lowercase, at least 1 number, at least 1 special character)